STIGQter STIGQter: STIG Summary: Juniper SRX Services Gateway VPN Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Juniper SRX Services Gateway VPN must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

DISA Rule

SV-214684r385486_rule

Vulnerability Number

V-214684

Group Title

SRG-NET-000132

Rule Version

JUSX-VN-000017

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Ensure functions, ports, protocols, and services identified on the PPSM CAL are not used for system services configuration.

[edit]
show security services

Compare the services that are enabled, including the port, services, protocols, and functions.

Consult the Juniper knowledge base and configuration guides to determine the commands for disabling each port, protocols, services, or functions that is not in compliance with the PPSM CAL and vulnerability assessments.

Check Contents

Entering the following commands from the configuration level of the hierarchy.

[edit]
show security services

If functions, ports, protocols, and services identified on the PPSM CAL are not disabled, this is a finding.

Vulnerability Number

V-214684

Documentable

False

Rule Version

JUSX-VN-000017

Severity Override Guidance

Entering the following commands from the configuration level of the hierarchy.

[edit]
show security services

If functions, ports, protocols, and services identified on the PPSM CAL are not disabled, this is a finding.

Check Content Reference

M

Target Key

4009

Comments