STIGQter: STIG Summary: Juniper SRX Services Gateway VPN Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Juniper SRX Services Gateway VPN device also fulfills the role of IDPS in the architecture, the device must inspect the VPN traffic in compliance with DoD IDPS requirements.

DISA Rule

SV-214671r382780_rule

Vulnerability Number

V-214671

Group Title

SRG-NET-000061

Rule Version

JUSX-VN-000004

Severity

CAT II

CCI(s)

• CCI-000067 - The information system monitors remote access methods.

Weight

10

Fix Recommendation

Perform a security review using the Juniper SRX Services Gateway IDPS STIG.

Check Contents

Obtain documentation from the site representative that the Juniper SRX is configured in compliance with the Juniper SRX Services Gateway IDPS STIG.

If the device has not been configured to comply with DoD IDPS requirements, this is a finding.

Vulnerability Number

V-214671

Documentable

False

Rule Version

JUSX-VN-000004

Severity Override Guidance

Obtain documentation from the site representative that the Juniper SRX is configured in compliance with the Juniper SRX Services Gateway IDPS STIG.

If the device has not been configured to comply with DoD IDPS requirements, this is a finding.

Check Content Reference

M

Target Key

4009

Comments