No profile (default benchmark)
Rules and Groups employed by this XCCDF Profile
-
SRG-NET-000015-ALG-000016
<GroupDescription></GroupDescription>Group -
The BIG-IP APM module must enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.
<VulnDiscussion>Successful authentication must not automatically give an entity access to an asset or security boundary. The lack of authoriz...Rule Medium Severity -
SRG-NET-000041-ALG-000022
<GroupDescription></GroupDescription>Group -
The F5 BIG-IP appliance providing user access control intermediary services must display the Standard Mandatory DOD-approved Notice and Consent Banner before granting access to resources.
<VulnDiscussion>Display of the DOD-approved use notification before granting access to the network device ensures privacy and security notifi...Rule Medium Severity -
SRG-NET-000042-ALG-000023
<GroupDescription></GroupDescription>Group -
The BIG-IP APM module must retain the Standard Mandatory DoD-approved Notice and Consent Banner on the screen until users accessing virtual servers acknowledge the usage conditions and take explicit actions to log on for further access.
<VulnDiscussion>The banner must be acknowledged by the user prior to allowing the user access to the network. This provides assurance that th...Rule Low Severity -
SRG-NET-000043-ALG-000024
<GroupDescription></GroupDescription>Group -
The BIG-IP APM module must display the Standard Mandatory DoD-approved Notice and Consent Banner before granting access to publicly accessible applications.
<VulnDiscussion>Display of a standardized and approved use notification before granting access to the publicly accessible network element ens...Rule Low Severity -
SRG-NET-000138-ALG-000063
<GroupDescription></GroupDescription>Group -
The BIG-IP APM module must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users) when connecting to virtual servers.
<VulnDiscussion>To assure accountability and prevent unauthenticated access, organizational users must be identified and authenticated to pre...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.