STIGQter: STIG Summary: F5 BIG-IP TMOS NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 02 Jul 2025:

The F5 BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session.

DISA Rule

SV-266135r1024669_rule

Vulnerability Number

V-266135

Group Title

SRG-APP-000435-NDM-000315

Rule Version

F5BI-DM-300099

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

From the BIG-IP GUI:
1. System.
2. Preferences.
3. Under "Security Settings", check "Require A Consistent Inbound IP For The Entire Web Session".
4. Update.

Check Contents

From the BIG-IP GUI:
1. System.
2. Preferences.
3. Under "Security Settings", verify "Require A Consistent Inbound IP For The Entire Web Session" box is checked.

If the BIG-IP appliance is not configured to require a consistent inbound IP for the entire session for management sessions, this is a finding.

Vulnerability Number

V-266135

Documentable

False

Rule Version

F5BI-DM-300099

Severity Override Guidance

From the BIG-IP GUI:
1. System.
2. Preferences.
3. Under "Security Settings", verify "Require A Consistent Inbound IP For The Entire Web Session" box is checked.

If the BIG-IP appliance is not configured to require a consistent inbound IP for the entire session for management sessions, this is a finding.

Check Content Reference

M

Target Key

5639