STIGQter: STIG Summary: F5 BIG-IP Device Management 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The BIG-IP appliance must limit the number of concurrent sessions to the Configuration Utility to 10 or an organization-defined number.

DISA Rule

SV-217381r557520_rule

Vulnerability Number

V-217381

Group Title

SRG-APP-000001-NDM-000200

Rule Version

F5BI-DM-000003

Severity

CAT II

CCI(s)

• CCI-000054 - The information system limits the number of concurrent sessions for each organization-defined account and/or account type to an organization-defined number of sessions.

Weight

10

Fix Recommendation

Configure the BIG-IP appliance either to limit the number of concurrent sessions to 10 or an organization-defined number.

Check Contents

Verify the BIG-IP appliance is configured to limit the number of concurrent sessions to 10 or an organization-defined number.

Navigate to the BIG-IP System manager >> System >> Preferences.

Set "System Settings:" to "Advanced".

Verify "Maximum HTTP Connections to Configuration Utility" is set to the organization-defined number of concurrent sessions.

If neither of these configurations is present, this is a finding.

Vulnerability Number

V-217381

Documentable

False

Rule Version

F5BI-DM-000003

Severity Override Guidance

Verify the BIG-IP appliance is configured to limit the number of concurrent sessions to 10 or an organization-defined number.

Navigate to the BIG-IP System manager >> System >> Preferences.

Set "System Settings:" to "Advanced".

Verify "Maximum HTTP Connections to Configuration Utility" is set to the organization-defined number of concurrent sessions.

If neither of these configurations is present, this is a finding.

Check Content Reference

M

Target Key

4036

Comments