Home
Security Hardening
DISA F5 Big IP Local Traffic Manager 11.x STIG V2R1

DISA F5 Big IP Local Traffic Manager 11.x STIG V2R1

F5BI-LT-000153 – The BIG-IP Core implementation providing intermediary services for remote access communications traffic must control remote access methods to virtual servers.
Details Remote access devices, such as those providing remote access to network devices and information systems, which lack automated control...
F5BI-LT-000157 – To protect against data mining, the BIG-IP Core implementation must be configured to prevent code injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, queries, and fields when providing content filtering to virtual servers.
Details Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering....
F5BI-LT-000159 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to prevent code injection attacks from being launched against application objects, including, at a minimum, application URLs and application code.
Details Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering....
F5BI-LT-000161 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to prevent SQL injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, and database fields.
Details Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering....
F5BI-LT-000163 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to detect code injection attacks being launched against data storage objects.
Details Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering....
F5BI-LT-000165 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to detect SQL injection attacks being launched against data storage objects, including, at a minimum, databases, database records, and database fields.
Details Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering....
F5BI-LT-000167 – The BIG-IP Core implementation must be configured to detect code injection attacks being launched against application objects, including, at a minimum, application URLs and application code, when providing content filtering to virtual servers.
Details Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering....
F5BI-LT-000085 – The BIG-IP Core implementation providing PKI-based, user authentication intermediary services must be configured to map the authenticated identity to the user account for PKI-based authentication to virtual servers.
Details Authorization for access to any network element requires an approved and assigned individual account identifier. To ensure only the...
F5BI-LT-000191 – The BIG-IP Core implementation must be configured to require users to re-authenticate to virtual servers when organization-defined circumstances or situations require re-authentication.
Details Without re-authentication, users may access resources or perform tasks for which they do not have authorization. In addition to...
F5BI-LT-000087 – The BIG-IP Core implementation must be configured to uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users) when connecting to virtual servers.
Details Lack of authentication enables anyone to gain access to the network or possibly a network element that provides opportunity...

Prev Next

DISA F5 Big IP Local Traffic Manager 11.x STIG V2R1

F5BI-LT-000153 – The BIG-IP Core implementation providing intermediary services for remote access communications traffic must control remote access methods to virtual servers.

F5BI-LT-000159 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to prevent code injection attacks from being launched against application objects, including, at a minimum, application URLs and application code.

F5BI-LT-000161 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to prevent SQL injection attacks from being launched against data storage objects, including, at a minimum, databases, database records, and database fields.

F5BI-LT-000163 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to detect code injection attacks being launched against data storage objects.

F5BI-LT-000165 – To protect against data mining, the BIG-IP Core implementation providing content filtering must be configured to detect SQL injection attacks being launched against data storage objects, including, at a minimum, databases, database records, and database fields.

F5BI-LT-000167 – The BIG-IP Core implementation must be configured to detect code injection attacks being launched against application objects, including, at a minimum, application URLs and application code, when providing content filtering to virtual servers.

F5BI-LT-000085 – The BIG-IP Core implementation providing PKI-based, user authentication intermediary services must be configured to map the authenticated identity to the user account for PKI-based authentication to virtual servers.

F5BI-LT-000191 – The BIG-IP Core implementation must be configured to require users to re-authenticate to virtual servers when organization-defined circumstances or situations require re-authentication.

F5BI-LT-000087 – The BIG-IP Core implementation must be configured to uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users) when connecting to virtual servers.