STIGQter: STIG Summary: F5 BIG-IP Device Management 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The BIG-IP appliance must be configured to protect against or limit the effects of all known types of Denial of Service (DoS) attacks on the BIG-IP appliance management network by limiting the number of concurrent sessions.

DISA Rule

SV-217417r557520_rule

Vulnerability Number

V-217417

Group Title

SRG-APP-000435-NDM-000315

Rule Version

F5BI-DM-000239

Severity

CAT I

CCI(s)

• CCI-002385 - The information system protects against or limits the effects of organization-defined types of denial of service attacks by employing organization-defined security safeguards.

Weight

10

Fix Recommendation

Configure the BIG-IP appliance to limit the effects of DoS attacks by employing security safeguards to limit the number of concurrent sessions to the configuration utility.

Check Contents

Verify the BIG-IP appliance is configured to protect against or to limit the effects of DoS attacks by limiting the number of concurrent sessions.

Review organizational Standard Operating Procedures (SOP) to ensure there is an organizational-defined threshold for the number of allowed connections to the management console.

Navigate to the BIG-IP System manager >> System >> Preferences.

Set "System Settings:" to "Advanced".

Verify "Maximum HTTP Connections To Configuration Utility" is set to the number of allowed connections defined in the local SOP.

If the BIG-IP appliance is not configured to protect against or limit the effects of DoS attacks by limiting the number of concurrent sessions, this is a finding.

Vulnerability Number

V-217417

Documentable

False

Rule Version

F5BI-DM-000239

Severity Override Guidance

Verify the BIG-IP appliance is configured to protect against or to limit the effects of DoS attacks by limiting the number of concurrent sessions.

Review organizational Standard Operating Procedures (SOP) to ensure there is an organizational-defined threshold for the number of allowed connections to the management console.

Navigate to the BIG-IP System manager >> System >> Preferences.

Set "System Settings:" to "Advanced".

Verify "Maximum HTTP Connections To Configuration Utility" is set to the number of allowed connections defined in the local SOP.

If the BIG-IP appliance is not configured to protect against or limit the effects of DoS attacks by limiting the number of concurrent sessions, this is a finding.

Check Content Reference

M

Target Key

4036

Comments