STIGQter STIGQter: STIG Summary: Juniper EX Series Switches Router Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Juniper router must be configured to disable the auxiliary port unless it is connected to a secured modem providing encryption and authentication.

DISA Rule

SV-253983r843982_rule

Vulnerability Number

V-253983

Group Title

SRG-NET-000019-RTR-000001

Rule Version

JUEX-RT-000110

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Disable the auxiliary port.

set system ports auxiliary disable
-or-
delete system ports auxiliary

If used for out-of-band administrative access, the port must be connected to a secured modem providing encryption and authentication.

Check Contents

Review the configuration and verify that the auxiliary port is disabled unless a secured modem providing encryption and authentication is connected to it.

The Junos auxiliary port is disabled by default. Verify the auxiliary port is not configured (there will be no [edit system ports auxiliary] stanza) or that the auxiliary port is explicitly disabled.

[edit system ports]
auxiliary {
disable;
}

If the auxiliary port is not disabled or is not connected to a secured modem when it is enabled, this is a finding.

Vulnerability Number

V-253983

Documentable

False

Rule Version

JUEX-RT-000110

Severity Override Guidance

Review the configuration and verify that the auxiliary port is disabled unless a secured modem providing encryption and authentication is connected to it.

The Junos auxiliary port is disabled by default. Verify the auxiliary port is not configured (there will be no [edit system ports auxiliary] stanza) or that the auxiliary port is explicitly disabled.

[edit system ports]
auxiliary {
disable;
}

If the auxiliary port is not disabled or is not connected to a secured modem when it is enabled, this is a finding.

Check Content Reference

M

Target Key

5479