The BIG-IP appliance must be configured to uniquely identify and authenticate organizational administrators (or processes acting on behalf of organizational administrators).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-60143	F5BI-DM-000095	SV-74573r1_rule		High

Description
To assure accountability and prevent unauthenticated access, organizational administrators must be uniquely identified and authenticated for all network management accesses to prevent potential misuse and compromise of the system.

STIG	Date
F5 BIG-IP Device Management 11.x Security Technical Implementation Guide	2019-12-20

Details

Check Text ( C-60997r1_chk )
Verify the BIG-IP appliance is configured to use a properly configured authentication server that uniquely identifies and authenticates organizational administrators. Navigate to the BIG-IP System manager >> System >> Users >> Authentication. Verify "Authentication: User Directory" is configured for an approved remote authentication server that uniquely identifies and authenticates organizational administrators. If the BIG-IP appliance is not configured to use a properly configured authentication server that uniquely identifies and authenticates organizational administrators, this is a finding.

Check Text ( C-60997r1_chk )

Verify the BIG-IP appliance is configured to use a properly configured authentication server that uniquely identifies and authenticates organizational administrators.

Navigate to the BIG-IP System manager >> System >> Users >> Authentication.

Verify "Authentication: User Directory" is configured for an approved remote authentication server that uniquely identifies and authenticates organizational administrators.

If the BIG-IP appliance is not configured to use a properly configured authentication server that uniquely identifies and authenticates organizational administrators, this is a finding.

Fix Text (F-65731r1_fix)
Configure the BIG-IP appliance to use a properly configured authentication server that uniquely identifies and authenticates organizational administrators.