STIGQter: STIG Summary: Juniper EX Series Switches Router Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Juniper router must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-254000r844033_rule

Vulnerability Number

V-254000

Group Title

SRG-NET-000131-RTR-000083

Rule Version

JUEX-RT-000280

Severity

CAT II

CCI(s)

• CCI-002403 - Only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Configure the network device to disable the call home service or feature.

Delete the phone-home hierarchy under [edit system].

delete system phone-home
Note: Because the command is hidden, Junos will not autocomplete and "phone-home" must be explicitly, and correctly, spelled out.

Check Contents

Verify the call home service is disabled on the device.

Verify [edit system] does NOT contain a phone-home hierarchy as shown:

[edit system]
host-name <hostname>;
:
<other system configuration>
:
phone-home {
server https://<applicable URL>;
rfc-compliant;
}

If a call home service is enabled, this is a finding.

Vulnerability Number

V-254000

Documentable

False

Rule Version

JUEX-RT-000280

Severity Override Guidance

Verify the call home service is disabled on the device.

Verify [edit system] does NOT contain a phone-home hierarchy as shown:

[edit system]
host-name <hostname>;
:
<other system configuration>
:
phone-home {
server https://<applicable URL>;
rfc-compliant;
}

If a call home service is enabled, this is a finding.

Check Content Reference

M

Target Key

5479