STIGQter: STIG Summary: F5 BIG-IP Access Policy Manager 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The BIG-IP APM module access policy profile must be configured to display an explicit logoff message to users, indicating the reliable termination of authenticated communications sessions when disconnecting from virtual servers.

DISA Rule

SV-230212r561153_rule

Vulnerability Number

V-230212

Group Title

SRG-NET-000519-ALG-000008

Rule Version

F5BI-AP-000151

Severity

CAT II

CCI(s)

• CCI-002364 - The information system displays an explicit logout message to users indicating the reliable termination of authenticated communications sessions.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

If user access control intermediary services are provided, configure the BIG-IP APM module to display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions.

Check Contents

If the BIG-IP APM module does not provide user access control intermediary services, this is not applicable.

Verify the BIG-IP APM module is configured as follows:

Navigate to the BIG-IP System manager >> Access Policy >> Access Profiles.

Click "Edit..." in the "Access Policy" column for an Access Profile used for connecting to virtual servers.

Verify the Access Profile is configured to display an explicit logoff message to users, indicating the reliable termination of authenticated communications sessions.

If the BIG-IP APM module is not configured to display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions, this is a finding.

Vulnerability Number

V-230212

Documentable

False

Rule Version

F5BI-AP-000151

Severity Override Guidance

If the BIG-IP APM module does not provide user access control intermediary services, this is not applicable.

Verify the BIG-IP APM module is configured as follows:

Navigate to the BIG-IP System manager >> Access Policy >> Access Profiles.

Click "Edit..." in the "Access Policy" column for an Access Profile used for connecting to virtual servers.

Verify the Access Profile is configured to display an explicit logoff message to users, indicating the reliable termination of authenticated communications sessions.

If the BIG-IP APM module is not configured to display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions, this is a finding.

Check Content Reference

M

Target Key

4018

Comments