STIGQter: STIG Summary: Juniper SRX Services Gateway NDM Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 30 Jan 2025:

The Juniper SRX Services Gateway must use the SHA256 or later protocol for password authentication for local accounts using password authentication (i.e., the root account and the account of last resort).

DISA Rule

SV-223223r1056174_rule

Vulnerability Number

V-223223

Group Title

SRG-APP-000172-NDM-000259

Rule Version

JUSX-DM-000136

Severity

CAT I

CCI(s)

• CCI-000197 - For password-based authentication, transmit passwords only cryptographically-protected channels.

Weight

10

Fix Recommendation

Enter the following example command from the configuration mode.

[edit]
set system login password format sha256

Check Contents

Verify the default local password enforces this requirement by entering the following in configuration mode.

[edit]
show system login password

If the password format is not set to SHA256 or higher, this is a finding.

Vulnerability Number

V-223223

Documentable

False

Rule Version

JUSX-DM-000136

Severity Override Guidance

Verify the default local password enforces this requirement by entering the following in configuration mode.

[edit]
show system login password

If the password format is not set to SHA256 or higher, this is a finding.

Check Content Reference

M

Target Key

4098