STIGQter STIGQter: STIG Summary: F5 BIG-IP Access Policy Manager 11.x Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 29 May 2015: The BIG-IP APM module access policy profile must be configured to display an explicit logoff message to users, indicating the reliable termination of authenticated communications sessions when disconnecting from virtual servers.

DISA Rule

SV-74471r1_rule

Vulnerability Number

V-60041

Group Title

SRG-NET-000308-ALG-000008

Rule Version

F5BI-AP-000151

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

If user access control intermediary services are provided, configure the BIG-IP APM module to display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions.

Check Contents

If the BIG-IP APM module does not provide user access control intermediary services, this is not applicable.

Verify the BIG-IP APM module is configured as follows:

Verify the BIG-IP APM module is configured as follows:

Navigate to the BIG-IP System manager >> Access Policy >> Access Profiles.

Click "Edit..." in the "Access Policy" column for an Access Profile used for connecting to virtual servers.

Verify the Access Profile is configured to display an explicit logoff message to users, indicating the reliable termination of authenticated communications sessions.

If the BIG-IP APM module is not configured to display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions, this is a finding.

Vulnerability Number

V-60041

Documentable

False

Rule Version

F5BI-AP-000151

Severity Override Guidance

If the BIG-IP APM module does not provide user access control intermediary services, this is not applicable.

Verify the BIG-IP APM module is configured as follows:

Verify the BIG-IP APM module is configured as follows:

Navigate to the BIG-IP System manager >> Access Policy >> Access Profiles.

Click "Edit..." in the "Access Policy" column for an Access Profile used for connecting to virtual servers.

Verify the Access Profile is configured to display an explicit logoff message to users, indicating the reliable termination of authenticated communications sessions.

If the BIG-IP APM module is not configured to display an explicit logoff message to users indicating the reliable termination of authenticated communications sessions, this is a finding.

Check Content Reference

M

Target Key

2837

Comments