STIGQter: STIG Summary: F5 BIG-IP TMOS ALG Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The F5 BIG-IP appliance providing intermediary services for remote access communications traffic must ensure inbound and outbound traffic is monitored for compliance with remote access security policies.

DISA Rule

SV-266138r1024835_rule

Vulnerability Number

V-266138

Group Title

SRG-NET-000061-ALG-000009

Rule Version

F5BI-AP-300002

Severity

CAT II

CCI(s)

• CCI-000067 - Employ automated mechanisms to monitor remote access methods.

Weight

10

Fix Recommendation

From the BIG-IP GUI:
1. Local Traffic.
2. Virtual Servers.
3. Virtual Server List.
4. Click on the name of a virtual server.
5. Security tab >> Policies.
6. Set "Application Security Policy" to "Enabled".
7. Select the policy from the drop-down.
8. Update.
9. Repeat for additional virtual servers.

Check Contents

If the BIG-IP appliance does not serve as an intermediary for remote access traffic, this is not applicable.

From the BIG-IP GUI:
1. Security.
2. Application Security.
3. Security Policies.
4. Policies List.
5. Review the list of policies and confirm they are applied to virtual servers being used for intermediary services for remote access communications traffic.

If the BIG-IP appliance is not configured to ensure inbound and outbound traffic is monitored for compliance with remote access security policies, this is a finding.

Vulnerability Number

V-266138

Documentable

False

Rule Version

F5BI-AP-300002

Severity Override Guidance

If the BIG-IP appliance does not serve as an intermediary for remote access traffic, this is not applicable.

From the BIG-IP GUI:
1. Security.
2. Application Security.
3. Security Policies.
4. Policies List.
5. Review the list of policies and confirm they are applied to virtual servers being used for intermediary services for remote access communications traffic.

If the BIG-IP appliance is not configured to ensure inbound and outbound traffic is monitored for compliance with remote access security policies, this is a finding.

Check Content Reference

M

Target Key

5640