An error occurred:

F5 BIG-IP Local Traffic Manager STIG

F5 BIG-IP Local Traffic Manager Security Technical Implementation Guide

ID Vuln ID Title Cat Status
F5BI-LT-000003 V-215738 The BIG-IP Core implementation must be configured to enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies. Cat II
F5BI-LT-000005 V-215739 The BIG-IP Core implementation must be configured to enforce approved authorizations for controlling the flow of information within the network based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic. Cat II
F5BI-LT-000007 V-215740 The BIG-IP Core implementation must be configured to restrict or block harmful or suspicious communications traffic by controlling the flow of information between interconnected networks based on attribute- and content-based inspection of the source, destination, headers, and/or content of the communications traffic. Cat I
F5BI-LT-000023 V-215741 The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to virtual servers. Cat III
F5BI-LT-000025 V-215742 The BIG-IP Core implementation must be configured to retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access. Cat III
F5BI-LT-000027 V-215743 The BIG-IP Core implementation must be configured to display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications. Cat III
F5BI-LT-000029 V-215744 The BIG-IP Core implementation must be configured to limit the number of concurrent sessions to an organization-defined number for virtual servers. Cat I
F5BI-LT-000031 V-215745 The BIG-IP Core implementation must be configured to monitor inbound traffic for remote access policy compliance when accepting connections to virtual servers. Cat II
F5BI-LT-000033 V-215746 The BIG-IP Core implementation must be configured to use encryption services that implement NIST SP 800-52 Revision 2 compliant cryptography to protect the confidentiality of connections to virtual servers. Cat II
F5BI-LT-000035 V-215747 The BIG-IP Core implementation must be configured to comply with the required TLS settings in NIST SP 800-52 Revision 1 for TLS services to virtual servers. Cat II
F5BI-LT-000037 V-215748 The BIG-IP Core implementation must be configured to use NIST SP 800-52 Revision 1 compliant cryptography to protect the integrity of remote access sessions to virtual servers. Cat II
F5BI-LT-000055 V-215749 The BIG-IP Core implementation must be configured to protect audit information from unauthorized read access. Cat II
F5BI-LT-000057 V-215750 The BIG-IP Core implementation must be configured to protect audit information from unauthorized modification. Cat II
F5BI-LT-000059 V-215751 The BIG-IP Core implementation must be configured to protect audit information from unauthorized deletion. Cat II
F5BI-LT-000061 V-215752 The BIG-IP Core implementation must be configured to protect audit tools from unauthorized access. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.