STIGQter: STIG Summary: Juniper Router NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 24 Jul 2020:

The Juniper router must be configured to protect audit information from unauthorized modification.

DISA Rule

SV-101219r1_rule

Vulnerability Number

V-91119

Group Title

SRG-APP-000119-NDM-000236

Rule Version

JUNI-ND-000380

Severity

CAT II

CCI(s)

• CCI-000163 - The information system protects audit information from unauthorized modification.

Weight

10

Fix Recommendation

Create a login class that provides the permission to configure logging parameters as well as a classes that do not allow configuration of logging parameters as shown in the example below.

[edit system]
set login class AUDITOR permissions [configure view-configuration]
set login class AUDITOR allow-configuration "(system syslog)"

set login class SR_ENGINEER permissions all
set login class SR_ENGINEER deny-configuration "(system syslog)"

Check Contents

Review the router configuration to verify that it is compliant with this requirement. The configuration example below allows only users belonging to the AUDITOR class to configure the logging parameters.

system {
login {
class AUDITOR {
permissions [configure view-configuration];
allow-configuration "(system syslog)";
}
class SR_ENGINEER {
permissions all;
deny-configuration "(system syslog)";
}
}
}

If the router is not configured to protect audit information from unauthorized modification, this is a finding.

Vulnerability Number

V-91119

Documentable

False

Rule Version

JUNI-ND-000380

Severity Override Guidance

Review the router configuration to verify that it is compliant with this requirement. The configuration example below allows only users belonging to the AUDITOR class to configure the logging parameters.

system {
login {
class AUDITOR {
permissions [configure view-configuration];
allow-configuration "(system syslog)";
}
class SR_ENGINEER {
permissions all;
deny-configuration "(system syslog)";
}
}
}

If the router is not configured to protect audit information from unauthorized modification, this is a finding.

Check Content Reference

M

Target Key

3381

Comments