STIGQter: STIG Summary: F5 BIG-IP Device Management 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020: STIGQter: STIG Summary: F5 BIG-IP Device Management 11.x Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:SV-228999r557520_rule
V-228999
SRG-APP-000516-NDM-000317
F5BI-DM-000163
CAT I
10
Configure the BIG-IP appliance to automatically terminate an administrator session after organization-defined conditions or trigger events requiring session disconnect.
Verify the BIG-IP appliance is configured to automatically terminate an administrator session after organization-defined conditions or trigger events requiring session disconnect.
Navigate to the BIG-IP System manager >> System >> Preferences.
Review the "Security Settings" section.
Verify "Idle Time Before Automatic Logout" is set to 900 seconds or less.
Verify "Restrict A Consistent Inbound IP For The Entire Session" is Enabled.
Verify "Enforce Idle Timeout While View Dashboard" is Enabled.
If the BIG-IP appliance is not configured to automatically terminate an administrator session under the designated conditions or trigger events, this is a finding.
V-228999
False
F5BI-DM-000163
Verify the BIG-IP appliance is configured to automatically terminate an administrator session after organization-defined conditions or trigger events requiring session disconnect.
Navigate to the BIG-IP System manager >> System >> Preferences.
Review the "Security Settings" section.
Verify "Idle Time Before Automatic Logout" is set to 900 seconds or less.
Verify "Restrict A Consistent Inbound IP For The Entire Session" is Enabled.
Verify "Enforce Idle Timeout While View Dashboard" is Enabled.
If the BIG-IP appliance is not configured to automatically terminate an administrator session under the designated conditions or trigger events, this is a finding.
M
4036