STIGQter: STIG Summary: F5 BIG-IP TMOS Firewall Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Sep 2024:

The F5 BIG-IP appliance must be configured to inspect all inbound and outbound traffic at the application layer.

DISA Rule

SV-266263r1024879_rule

Vulnerability Number

V-266263

Group Title

SRG-NET-000364-FW-000040

Rule Version

F5BI-FW-300028

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>
5. Configure rules to use packet headers and packet attributes, including source and destination IP addresses and ports inspect all inbound and outbound traffic at the application layer.

Check Contents

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>

If configured rules in the policy do not use packet headers and packet attributes, including source and destination IP addresses and ports to inspect all inbound and outbound traffic at the application layer, this is a finding.

Vulnerability Number

V-266263

Documentable

False

Rule Version

F5BI-FW-300028

Severity Override Guidance

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>

If configured rules in the policy do not use packet headers and packet attributes, including source and destination IP addresses and ports to inspect all inbound and outbound traffic at the application layer, this is a finding.

Check Content Reference

M

Target Key

5641