STIGQter: STIG Summary: Juniper EX Series Switches Network Device Management Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Juniper EX switch must be configured to off-load audit records onto a different system than the system being audited.

DISA Rule

SV-253937r1212008_rule

Vulnerability Number

V-253937

Group Title

SRG-APP-000515-NDM-000325

Rule Version

JUEX-NM-000600

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure syslog host

set system syslog host <external syslog host IPv4 or IPv6 address> any info

Check Contents

Verify an external syslog server is configured. The lowest severity level, "any", is debug and will generate a significant number of messages.

[edit system syslog]
host <external syslog address> {
any info;
structured-format; << Only if structured formatting is required, otherwise events are recorded in standard format.
}
time-format year;


If the device does not offload audit records to an external syslog server, this is a finding.

Vulnerability Number

V-253937

Documentable

False

Rule Version

JUEX-NM-000600

Severity Override Guidance

Verify an external syslog server is configured. The lowest severity level, "any", is debug and will generate a significant number of messages.

[edit system syslog]
host <external syslog address> {
any info;
structured-format; << Only if structured formatting is required, otherwise events are recorded in standard format.
}
time-format year;


If the device does not offload audit records to an external syslog server, this is a finding.

Check Content Reference

M

Target Key

5477