← Back to A10 Networks ADC ALG Security Technical Implementation Guide

V-237050

CAT II (Medium)

The A10 Networks ADC must implement load balancing to limit the effects of known and unknown types of Denial of Service (DoS) attacks.

Rule ID

SV-237050r831325_rule

STIG

A10 Networks ADC ALG Security Technical Implementation Guide

Version

V2R2

CCIs

CCI-002385

Discussion

Although maintaining high availability is normally an operational consideration, load balancing is also a useful strategy in mitigating network-based DoS attacks. If the network does not provide safeguards against DoS attacks, network resources will be unavailable to users. Load balancing provides service redundancy which reduces the susceptibility of the enclave to many DoS attacks. Since one of the primary purposes of the Application Delivery Controller is to balance loads across multiple servers, it would be extremely unusual for it to not be configured to perform this function.

Check Content

Review the device configuration.

Ask the Administrator which Application Delivery Services are being provided by the device.

The following command displays information for Server Load Balancing:
show slb

If no Server Load Balancing sessions exist, this is a finding.

Fix Text

Configure the device to balance the traffic load of provided services. This will require configuring Server Load Balancing.