Skip to content

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • The F5 BIG-IP appliance must terminate all network connections associated with a communications session at the end of the session or after 15 minutes of inactivity.

    <VulnDiscussion>Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take c...
    Rule High Severity
  • SRG-NET-000362-ALG-000112

    <GroupDescription></GroupDescription>
    Group
  • The F5 BIG-IP appliance providing content filtering must employ rate-based attack prevention behavior analysis.

    &lt;VulnDiscussion&gt;If the network does not provide safeguards against denial-of-service (DoS) attacks, network resources will be unavailable to ...
    Rule Medium Severity
  • SRG-NET-000362-ALG-000155

    <GroupDescription></GroupDescription>
    Group
  • The F5 BIG-IP appliance providing content filtering must protect against or limit the effects of known and unknown types of denial-of-service (DoS) attacks by employing pattern recognition pre-processors.

    &lt;VulnDiscussion&gt;If the network does not provide safeguards against DoS attacks, network resources will be unavailable to users. Installation...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules