Home
Security Hardening
DISA F5 Big IP Device Management 11.x STIG V2R1

DISA F5 Big IP Device Management 11.x STIG V2R1

F5BI-DM-000043 – The BIG-IP appliance must be configured to protect against an individual (or process acting on behalf of an individual) falsely denying having performed system configuration changes.
Details This requirement supports non-repudiation of actions taken by an administrator and is required in order to maintain the integrity...
F5BI-DM-000003 – The BIG-IP appliance must limit the number of concurrent sessions to the Configuration Utility to 10 or an organization-defined number – 1 for each administrator account and/or administrator account type.
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
F5BI-DM-000067 – The BIG-IP appliance must be configured to alert the ISSO and SA (at a minimum) in the event of an audit processing failure – at a minimum in the event of an audit processing failure.
Details It is critical for the appropriate personnel to be aware if a system is at risk of failing to...
F5BI-DM-000007 – The BIG-IP appliance must be configured to initiate a session lock after a 10-minute period of inactivity.
Details A session lock is a temporary network device- or administrator-initiated action taken when the administrator stops work but does...
F5BI-DM-000013 – The BIG-IP appliance must provide automated support for account management functions.
Details Account management functions include: assignment of group or role membership; identifying account type; specifying user access authorizations (i.e., privileges);...
F5BI-DM-000015 – The BIG-IP appliance must automatically remove or disable temporary user accounts after 72 hours.
Details Temporary accounts are established as part of normal account activation procedures when there is a need for short-term accounts...
F5BI-DM-000017 – The BIG-IP appliance must automatically disable accounts after a 35-day period of account inactivity.
Details Since the accounts in the network device are privileged or system-level accounts, account management is vital to the security...
F5BI-DM-000019 – The BIG-IP appliance must automatically audit account creation.
Details Upon gaining access to a network device, an attacker will often first attempt to create a persistent method of...
F5BI-DM-000021 – The BIG-IP appliance must automatically audit account modification.
Details Since the accounts in the network device are privileged or system-level accounts, account management is vital to the security...
F5BI-DM-000023 – The BIG-IP appliance must automatically audit account-disabling actions.
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...

DISA F5 Big IP Device Management 11.x STIG V2R1

F5BI-DM-000043 – The BIG-IP appliance must be configured to protect against an individual (or process acting on behalf of an individual) falsely denying having performed system configuration changes.

F5BI-DM-000003 – The BIG-IP appliance must limit the number of concurrent sessions to the Configuration Utility to 10 or an organization-defined number – 1 for each administrator account and/or administrator account type.

F5BI-DM-000067 – The BIG-IP appliance must be configured to alert the ISSO and SA (at a minimum) in the event of an audit processing failure – at a minimum in the event of an audit processing failure.

F5BI-DM-000007 – The BIG-IP appliance must be configured to initiate a session lock after a 10-minute period of inactivity.

F5BI-DM-000013 – The BIG-IP appliance must provide automated support for account management functions.

F5BI-DM-000015 – The BIG-IP appliance must automatically remove or disable temporary user accounts after 72 hours.

F5BI-DM-000017 – The BIG-IP appliance must automatically disable accounts after a 35-day period of account inactivity.

F5BI-DM-000019 – The BIG-IP appliance must automatically audit account creation.

F5BI-DM-000021 – The BIG-IP appliance must automatically audit account modification.

F5BI-DM-000023 – The BIG-IP appliance must automatically audit account-disabling actions.