JUEX-NM-000010 - The Juniper EX switch must be configured to limit the number of concurrent management sessions to 10 or less.

CAT|II

CCI|CCI-000054

Rule-ID|SV-253878r879511_rule

STIG-ID|JUEX-NM-000010

Vuln-ID|V-253878

JUEX-NM-000020 - The Juniper EX switch must be configured to automatically audit account creation.

CCI|CCI-000018

Rule-ID|SV-253879r879525_rule

STIG-ID|JUEX-NM-000020

Vuln-ID|V-253879

JUEX-NM-000030 - The Juniper EX switch must be configured to automatically audit account modification.

CCI|CCI-001403

Rule-ID|SV-253880r879526_rule

STIG-ID|JUEX-NM-000030

Vuln-ID|V-253880

JUEX-NM-000040 - The Juniper EX switch must be configured to automatically audit account disabling actions.

CCI|CCI-001404

Rule-ID|SV-253881r879527_rule

STIG-ID|JUEX-NM-000040

Vuln-ID|V-253881

JUEX-NM-000050 - The Juniper EX switch must be configured to automatically audit account removal actions.

CCI|CCI-001405

Rule-ID|SV-253882r879528_rule

STIG-ID|JUEX-NM-000050

Vuln-ID|V-253882

JUEX-NM-000060 - The Juniper EX switch must be configured to assign appropriate user roles or access levels to authenticated users.

CAT|I

CCI|CCI-000213

Rule-ID|SV-253883r879530_rule

STIG-ID|JUEX-NM-000060

Vuln-ID|V-253883

JUEX-NM-000070 - The Juniper EX switch must be configured to enforce approved authorizations for controlling the flow of management information within the network device based on information flow control policies.

CCI|CCI-001368

Rule-ID|SV-253884r879533_rule

STIG-ID|JUEX-NM-000070

Vuln-ID|V-253884

JUEX-NM-000080 - The Juniper EX switch must be configured to enforce the limit of three consecutive invalid logon attempts for any given user, after which time it must block any login attempt for that user for 15 minutes.

CCI|CCI-000044

Rule-ID|SV-253885r879546_rule

STIG-ID|JUEX-NM-000080

Vuln-ID|V-253885

JUEX-NM-000090 - The Juniper EX switch must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.

CCI|CCI-000048

Rule-ID|SV-253886r919495_rule

STIG-ID|JUEX-NM-000090

Vuln-ID|V-253886

JUEX-NM-000100 - The Juniper EX switch must be configured to protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by nonrepudiation.

CCI|CCI-000166

Rule-ID|SV-253887r879554_rule

STIG-ID|JUEX-NM-000100

Vuln-ID|V-253887

JUEX-NM-000110 - The Juniper EX switch must be configured to generate audit records for executed commands.

CCI|CCI-000172

Rule-ID|SV-253888r879561_rule

STIG-ID|JUEX-NM-000110

Vuln-ID|V-253888

JUEX-NM-000120 - The Juniper device must be configured to produce audit log records containing sufficient information to establish what type of event occurred.

CCI|CCI-000130

Rule-ID|SV-253889r879563_rule

STIG-ID|JUEX-NM-000120

Vuln-ID|V-253889

JUEX-NM-000130 - The Juniper EX switch must be configured to produce audit records containing information to establish when (date and time) the events occurred.

CCI|CCI-000131

Rule-ID|SV-253890r879564_rule

STIG-ID|JUEX-NM-000130

Vuln-ID|V-253890

JUEX-NM-000140 - The Juniper EX switch must be configured to produce audit records containing information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-253891r879565_rule

STIG-ID|JUEX-NM-000140

Vuln-ID|V-253891

JUEX-NM-000150 - The Juniper EX switch must be configured to produce audit log records containing information to establish the source of events.

CCI|CCI-000133

Rule-ID|SV-253892r879566_rule

STIG-ID|JUEX-NM-000150

Vuln-ID|V-253892

JUEX-NM-000160 - The Juniper EX switch must be configured to produce audit records that contain information to establish the outcome of the event.

CCI|CCI-000134

Rule-ID|SV-253893r879567_rule

STIG-ID|JUEX-NM-000160

Vuln-ID|V-253893

JUEX-NM-000170 - The Juniper EX switch must be configured to generate audit records containing information that establishes the identity of any individual or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-253894r879568_rule

STIG-ID|JUEX-NM-000170

Vuln-ID|V-253894

JUEX-NM-000180 - The Juniper EX switch must be configured to generate audit records containing the full-text recording of privileged commands.

CCI|CCI-000135

Rule-ID|SV-253895r879569_rule

STIG-ID|JUEX-NM-000180

Vuln-ID|V-253895

JUEX-NM-000190 - The Juniper EX switch must be configured to protect audit information from unauthorized modification.

CCI|CCI-000163

Rule-ID|SV-253896r879577_rule

STIG-ID|JUEX-NM-000190

Vuln-ID|V-253896

JUEX-NM-000200 - The Juniper EX switch must be configured to protect audit information from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-253897r879578_rule

STIG-ID|JUEX-NM-000200

Vuln-ID|V-253897

JUEX-NM-000210 - The Juniper EX switch must be configured to protect audit tools from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-253898r879579_rule

STIG-ID|JUEX-NM-000210

Vuln-ID|V-253898

JUEX-NM-000220 - The Juniper EX switch must be configured to limit privileges to change the software resident within software libraries.

CCI|CCI-001499

Rule-ID|SV-253899r879586_rule

STIG-ID|JUEX-NM-000220

Vuln-ID|V-253899

JUEX-NM-000230 - The Juniper EX switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

CCI|CCI-000382

Rule-ID|SV-253900r879588_rule

STIG-ID|JUEX-NM-000230

Vuln-ID|V-253900

JUEX-NM-000240 - The Juniper EX switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

CCI|CCI-001358

CCI|CCI-002111

Rule-ID|SV-253901r879589_rule

STIG-ID|JUEX-NM-000240

Vuln-ID|V-253901

JUEX-NM-000260 - The Juniper EX switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts.

CCI|CCI-001941

Rule-ID|SV-253903r879597_rule

STIG-ID|JUEX-NM-000260

Vuln-ID|V-253903

JUEX-NM-000270 - The Juniper EX switch must be configured to enforce a minimum 15-character password length.

CCI|CCI-000205

Rule-ID|SV-253904r879601_rule

STIG-ID|JUEX-NM-000270

Vuln-ID|V-253904

JUEX-NM-000280 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one uppercase character be used.

CCI|CCI-000192

Rule-ID|SV-253905r879603_rule

STIG-ID|JUEX-NM-000280

Vuln-ID|V-253905

JUEX-NM-000290 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one lowercase character be used.

CCI|CCI-000193

Rule-ID|SV-253906r879604_rule

STIG-ID|JUEX-NM-000290

Vuln-ID|V-253906

JUEX-NM-000300 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one numeric character be used.

CCI|CCI-000194

Rule-ID|SV-253907r879605_rule

STIG-ID|JUEX-NM-000300

Vuln-ID|V-253907

JUEX-NM-000310 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one punctuation (special) character be used.

CCI|CCI-001619

Rule-ID|SV-253908r879606_rule

STIG-ID|JUEX-NM-000310

Vuln-ID|V-253908

JUEX-NM-000320 - The Juniper EX switch must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.

CCI|CCI-000195

Rule-ID|SV-253909r879607_rule

STIG-ID|JUEX-NM-000320

Vuln-ID|V-253909

JUEX-NM-000330 - The Juniper EX switch must be configured to only store cryptographic representations of passwords.

CCI|CCI-000196

Rule-ID|SV-253910r879608_rule

STIG-ID|JUEX-NM-000330

Vuln-ID|V-253910

JUEX-NM-000340 - The Juniper EX switch must be configured to use FIPS 140-2 approved algorithms for authentication to a cryptographic module.

CCI|CCI-000803

Rule-ID|SV-253911r879616_rule

STIG-ID|JUEX-NM-000340

Vuln-ID|V-253911

JUEX-NM-000350 - The Juniper EX switch must be configured to terminate all sessions and network connections when nonlocal device maintenance is completed.

CCI|CCI-000879

Rule-ID|SV-253912r879621_rule

STIG-ID|JUEX-NM-000350

Vuln-ID|V-253912

JUEX-NM-000360 - The Juniper EX switch must be configured to end all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill mission requirements.

CCI|CCI-001133

Rule-ID|SV-253913r916342_rule

STIG-ID|JUEX-NM-000360

Vuln-ID|V-253913

JUEX-NM-000370 - The Juniper device must be configured to only allow authorized administrators to view or change the device configuration, system files, and other files stored either in the device or on removable media (such as a flash drive).

CCI|CCI-001199

Rule-ID|SV-253914r879642_rule

STIG-ID|JUEX-NM-000370

Vuln-ID|V-253914

JUEX-NM-000380 - The Juniper EX switch must be configured to automatically audit account enabling actions.

CCI|CCI-002130

Rule-ID|SV-253915r879696_rule

STIG-ID|JUEX-NM-000380

Vuln-ID|V-253915

JUEX-NM-000390 - The Juniper EX switch must be configured to enforce organization-defined role-based access control policies over defined subjects and objects.

CCI|CCI-000366

CCI|CCI-002169

Rule-ID|SV-253916r879706_rule

STIG-ID|JUEX-NM-000390

Vuln-ID|V-253916

JUEX-NM-000400 - The Juniper EX switch must be configured to audit the execution of privileged functions.

CCI|CCI-002234

Rule-ID|SV-253917r879720_rule

STIG-ID|JUEX-NM-000400

Vuln-ID|V-253917

JUEX-NM-000410 - The Juniper EX switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

CCI|CCI-001849

Detections

Analytics

DISA Juniper EX Series Network Device Management v1r4

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Jun 17, 2024 Miscellaneous Metadata updated.
Revision 1.1 May 3, 2024 Miscellaneous Audit deprecated. Metadata updated. References updated.