STIGQter: STIG Summary: F5 BIG-IP TMOS Firewall Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Sep 2024:

The F5 BIG-IP appliance must be configured to block all outbound management traffic.

DISA Rule

SV-266266r1024584_rule

Vulnerability Number

V-266266

Group Title

SRG-NET-000364-FW-000035

Rule Version

F5BI-FW-300031

Severity

CAT II

CCI(s)

CCI-002403 - Only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

Fix Recommendation

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>
5. Configure rules to using packet headers and packet attributes, including source and destination IP addresses and ports to filter to block all outbound management traffic.

Check Contents

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>

If configured rules in the policy do not block all outbound management traffic, this is a finding.

Vulnerability Number

V-266266

Documentable

False

Rule Version

F5BI-FW-300031

Severity Override Guidance

From the BIG-IP GUI:
1. Security.
2. Network Firewall.
3. Policies.
4. <Policy Name>

If configured rules in the policy do not block all outbound management traffic, this is a finding.

Check Content Reference

Target Key

5641