STIGQter: STIG Summary: F5 BIG-IP TMOS Firewall Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Sep 2024:

The F5 BIG-IP appliance must be configured to filter outbound traffic on all internal interfaces.

DISA Rule

SV-266265r1024583_rule

Vulnerability Number

V-266265

Group Title

SRG-NET-000364-FW-000032

Rule Version

F5BI-FW-300030

Severity

CAT II

CCI(s)

CCI-002403 - Only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

Fix Recommendation

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>
5. Configure rules to using packet headers and packet attributes, including source and destination IP addresses and ports to filter outbound traffic on all internal interfaces.

Check Contents

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>

If configured rules in the policy do not filter outbound traffic on all internal interface, this is a finding.

Vulnerability Number

V-266265

Documentable

False

Rule Version

F5BI-FW-300030

Severity Override Guidance

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>

If configured rules in the policy do not filter outbound traffic on all internal interface, this is a finding.

Check Content Reference

Target Key

5641