Home
Security Hardening
DISA F5 Big IP Local Traffic Manager 11.x STIG V2R1

DISA F5 Big IP Local Traffic Manager 11.x STIG V2R1

F5BI-LT-000003 – The BIG-IP Core implementation must be configured to enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.
Details Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authorization-based...
F5BI-LT-000005 – The BIG-IP Core implementation must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.
Details Information flow control regulates where information is allowed to travel within a network. The flow of all network traffic...
F5BI-LT-000007 – The BIG-IP Core implementation must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.
Details Information flow control regulates where information is allowed to travel within a network and between interconnected networks. Blocking or...
F5BI-LT-000023 – The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to virtual servers.
Details Display of a standardized and approved use notification before granting access to the virtual servers ensures privacy and security...
F5BI-LT-000025 – The BIG-IP Core implementation must be configured to retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access.
Details The banner must be acknowledged by the user prior to allowing the user access to virtual servers. This provides...
F5BI-LT-000027 – The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications.
Details Display of a standardized and approved use notification before granting access to the publicly accessible network element ensures privacy...
F5BI-LT-000061 – The BIG-IP Core implementation must be configured to protect audit tools from unauthorized access.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
F5BI-LT-000063 – The BIG-IP Core implementation must be configured to protect audit tools from unauthorized modification.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
F5BI-LT-000065 – The BIG-IP Core implementation must be configured to protect audit tools from unauthorized deletion.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
F5BI-LT-000067 – The BIG-IP Core implementation must be configured so that only functions, ports, protocols, and/or services that are documented for the server/application for which the virtual servers are providing connectivity.
Details Information systems are capable of providing a wide variety of functions (capabilities or processes) and services. Some of these...

DISA F5 Big IP Local Traffic Manager 11.x STIG V2R1

F5BI-LT-000003 – The BIG-IP Core implementation must be configured to enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.

F5BI-LT-000005 – The BIG-IP Core implementation must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic.

F5BI-LT-000023 – The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to virtual servers.

F5BI-LT-000025 – The BIG-IP Core implementation must be configured to retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access.

F5BI-LT-000027 – The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications.

F5BI-LT-000061 – The BIG-IP Core implementation must be configured to protect audit tools from unauthorized access.

F5BI-LT-000063 – The BIG-IP Core implementation must be configured to protect audit tools from unauthorized modification.

F5BI-LT-000065 – The BIG-IP Core implementation must be configured to protect audit tools from unauthorized deletion.

F5BI-LT-000067 – The BIG-IP Core implementation must be configured so that only functions, ports, protocols, and/or services that are documented for the server/application for which the virtual servers are providing connectivity.