Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Resources
Documents
Publishers
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
F5 BIG-IP TMOS NDM Security Technical Implementation Guide
SRG-APP-000435-NDM-000315
The F5 BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session.
The F5 BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session.
An XCCDF Rule
Details
Profiles
Prose
The F5 BIG-IP appliance must be configured to restrict a consistent inbound IP for the entire management session.
Medium Severity
<VulnDiscussion>This security measure helps limit the effects of denial-of-service (DoS) attacks by employing anti-session hijacking security safeguards. Session hijacking, also called cookie hijacking, is the exploitation of a valid computer session to gain unauthorized access to an application. The attacker steals (or hijacks) the cookies from a valid user and attempts to use them for authentication.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>