STIGQter STIGQter: STIG Summary: F5 BIG-IP Device Management 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The BIG-IP appliance must be configured to terminate all network connections associated with a device management session at the end of the session, or the session must be configured to be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

DISA Rule

SV-217409r557520_rule

Vulnerability Number

V-217409

Group Title

SRG-APP-000190-NDM-000267

Rule Version

F5BI-DM-000139

Severity

CAT I

CCI(s)

Weight

10

Fix Recommendation

Configure the BIG-IP appliance to terminate the connection associated with a device management session at the end of the session or after 10 minutes of inactivity.

Check Contents

Verify the BIG-IP appliance is configured to terminate a connection associated with a device management session at the end of the session or after 10 minutes of inactivity.

Navigate to the BIG-IP System manager >> System >> Preferences.

Verify that "Idle Time Before Automatic Logout" is set to 10 minutes or less.

If the BIG-IP appliance is not configured to terminate the connection associated with a device management session at the end of the session or after 10 minutes of inactivity, this is a finding.

Vulnerability Number

V-217409

Documentable

False

Rule Version

F5BI-DM-000139

Severity Override Guidance

Verify the BIG-IP appliance is configured to terminate a connection associated with a device management session at the end of the session or after 10 minutes of inactivity.

Navigate to the BIG-IP System manager >> System >> Preferences.

Verify that "Idle Time Before Automatic Logout" is set to 10 minutes or less.

If the BIG-IP appliance is not configured to terminate the connection associated with a device management session at the end of the session or after 10 minutes of inactivity, this is a finding.

Check Content Reference

M

Target Key

4036

Comments