STIGQter: STIG Summary: Juniper SRX Services Gateway IDPS Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Juniper Networks SRX Series Gateway IDPS must automatically install updates to signature definitions.

DISA Rule

SV-214632r997699_rule

Vulnerability Number

V-214632

Group Title

SRG-NET-000251-IDPS-00178

Rule Version

JUSX-IP-000026

Severity

CAT II

CCI(s)

CCI-004964 - Automatically update malicious code protection mechanisms as new releases are available in accordance with organizational configuration management policy.

Weight

Fix Recommendation

The following example configures automatic updates of the IDP signature database:

Specify the URL to use.

[edit]
set security idp security-package url <DoD repository>

Create a schedule for the automatic downloads.

set security idp security-package automatic interval <interval>
set security idp security-package automatic enable

Also, recommend a local log be created to track when automated updates are performed for troubleshooting purposes.

set system syslog file IDP_OPERATIONS any any match IDP_SCHEDULE

Check Contents

Verify automatic updates are configured.

[edit]
show security idp

If updates are not automatically installed, this is a finding.

Vulnerability Number

V-214632

Documentable

False

Rule Version

JUSX-IP-000026

Severity Override Guidance

Verify automatic updates are configured.

[edit]
show security idp

If updates are not automatically installed, this is a finding.

Check Content Reference

Target Key

4006