STIGQter STIGQter: STIG Summary: Juniper EX Series Switches Network Device Management Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Juniper EX switch must be configured to limit the number of concurrent management sessions to 1 or an organization-defined value.

DISA Rule

SV-253878r1212002_rule

Vulnerability Number

V-253878

Group Title

SRG-APP-000001-NDM-000200

Rule Version

JUEX-NM-000010

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the switch to limit connection limits for all enabled administrative access methods to "1" or an organization-defined value documented in the SSP.

1. Enter configuration mode.
2. Configure enabled administrative access methods to "1" or an organizationally defined value documented in the SSP.
3. Commit the configuration.

SSH example limiting connections to 1:
user@host> configure
Entering configuration mode

user@host# set system services ssh connection-limit 1
or
user@host# set system services ssh connection-limit <documented organizationally defined value>

user@host# commit
commit complete

Check Contents

If, based on operational needs, an organization-defined number other than "1" is used, document the value in the System Security Plan (SSP). Verify the connection limit for all enabled administrative access methods is "1" or an organizationally defined value documented in the SSP.

SSH example:
user@host> show configuration system services ssh

connection-limit 1;

If the device does not limit the number of concurrent management sessions to "1" or an organization-defined number, this is a finding.

Vulnerability Number

V-253878

Documentable

False

Rule Version

JUEX-NM-000010

Severity Override Guidance

If, based on operational needs, an organization-defined number other than "1" is used, document the value in the System Security Plan (SSP). Verify the connection limit for all enabled administrative access methods is "1" or an organizationally defined value documented in the SSP.

SSH example:
user@host> show configuration system services ssh

connection-limit 1;

If the device does not limit the number of concurrent management sessions to "1" or an organization-defined number, this is a finding.

Check Content Reference

M

Target Key

5477