JUEX-NM-000010 - The Juniper EX switch must be configured to limit the number of concurrent management sessions to 10 or less.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-253878r879511_rule

STIG-ID|JUEX-NM-000010

Vuln-ID|V-253878

JUEX-NM-000020 - The Juniper EX switch must be configured to automatically audit account creation.

800-53|AC-2(4)

CCI|CCI-000018

Rule-ID|SV-253879r944342_rule

STIG-ID|JUEX-NM-000020

Vuln-ID|V-253879

JUEX-NM-000060 - The Juniper EX switch must be configured to assign appropriate user roles or access levels to authenticated users.

800-53|AC-3

CAT|I

CCI|CCI-000213

Rule-ID|SV-253883r879530_rule

STIG-ID|JUEX-NM-000060

Vuln-ID|V-253883

JUEX-NM-000070 - The Juniper EX switch must be configured to enforce approved authorizations for controlling the flow of management information within the network device based on information flow control policies.

800-53|AC-4

CCI|CCI-001368

Rule-ID|SV-253884r879533_rule

STIG-ID|JUEX-NM-000070

Vuln-ID|V-253884

JUEX-NM-000080 - The Juniper EX switch must be configured to enforce the limit of three consecutive invalid logon attempts for any given user, after which time it must block any login attempt for that user for 15 minutes.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-253885r879546_rule

STIG-ID|JUEX-NM-000080

Vuln-ID|V-253885

JUEX-NM-000090 - The Juniper EX switch must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-253886r919495_rule

STIG-ID|JUEX-NM-000090

Vuln-ID|V-253886

JUEX-NM-000120 - The Juniper device must be configured to produce audit log records containing sufficient information to establish what type of event occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-253889r879563_rule

STIG-ID|JUEX-NM-000120

Vuln-ID|V-253889

JUEX-NM-000130 - The Juniper EX switch must be configured to produce audit records containing information to establish when (date and time) the events occurred.

CCI|CCI-000131

Rule-ID|SV-253890r879564_rule

STIG-ID|JUEX-NM-000130

Vuln-ID|V-253890

JUEX-NM-000140 - The Juniper EX switch must be configured to produce audit records containing information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-253891r879565_rule

STIG-ID|JUEX-NM-000140

Vuln-ID|V-253891

JUEX-NM-000150 - The Juniper EX switch must be configured to produce audit log records containing information to establish the source of events.

CCI|CCI-000133

Rule-ID|SV-253892r879566_rule

STIG-ID|JUEX-NM-000150

Vuln-ID|V-253892

JUEX-NM-000160 - The Juniper EX switch must be configured to produce audit records that contain information to establish the outcome of the event.

CCI|CCI-000134

Rule-ID|SV-253893r879567_rule

STIG-ID|JUEX-NM-000160

Vuln-ID|V-253893

JUEX-NM-000170 - The Juniper EX switch must be configured to generate audit records containing information that establishes the identity of any individual or process associated with the event.

CCI|CCI-001487

Rule-ID|SV-253894r879568_rule

STIG-ID|JUEX-NM-000170

Vuln-ID|V-253894

JUEX-NM-000190 - The Juniper EX switch must be configured to protect audit information from unauthorized modification.

800-53|AU-9

CCI|CCI-000163

Rule-ID|SV-253896r879577_rule

STIG-ID|JUEX-NM-000190

Vuln-ID|V-253896

JUEX-NM-000200 - The Juniper EX switch must be configured to protect audit information from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-253897r879578_rule

STIG-ID|JUEX-NM-000200

Vuln-ID|V-253897

JUEX-NM-000210 - The Juniper EX switch must be configured to protect audit tools from unauthorized access.

CCI|CCI-001493

Rule-ID|SV-253898r879579_rule

STIG-ID|JUEX-NM-000210

Vuln-ID|V-253898

JUEX-NM-000220 - The Juniper EX switch must be configured to limit privileges to change the software resident within software libraries.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-253899r879586_rule

STIG-ID|JUEX-NM-000220

Vuln-ID|V-253899

JUEX-NM-000230 - The Juniper EX switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-253900r879588_rule

STIG-ID|JUEX-NM-000230

Vuln-ID|V-253900

JUEX-NM-000240 - The Juniper EX switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

800-53|AC-2(7)(a)

800-53|AC-2a.

CCI|CCI-001358

CCI|CCI-002111

Rule-ID|SV-253901r879589_rule

STIG-ID|JUEX-NM-000240

Vuln-ID|V-253901

JUEX-NM-000260 - The Juniper EX switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts.

800-53|IA-2(8)

CCI|CCI-001941

Rule-ID|SV-253903r879597_rule

STIG-ID|JUEX-NM-000260

Vuln-ID|V-253903

JUEX-NM-000270 - The Juniper EX switch must be configured to enforce a minimum 15-character password length.

800-53|IA-5(1)(a)

CCI|CCI-000205

Rule-ID|SV-253904r879601_rule

STIG-ID|JUEX-NM-000270

Vuln-ID|V-253904

JUEX-NM-000280 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one uppercase character be used.

CCI|CCI-000192

Rule-ID|SV-253905r879603_rule

STIG-ID|JUEX-NM-000280

Vuln-ID|V-253905

JUEX-NM-000290 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one lowercase character be used.

CCI|CCI-000193

Rule-ID|SV-253906r879604_rule

STIG-ID|JUEX-NM-000290

Vuln-ID|V-253906

JUEX-NM-000300 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one numeric character be used.

CCI|CCI-000194

Rule-ID|SV-253907r879605_rule

STIG-ID|JUEX-NM-000300

Vuln-ID|V-253907

JUEX-NM-000310 - The Juniper EX switch must be configured to enforce password complexity by requiring that at least one punctuation (special) character be used.

CCI|CCI-001619

Rule-ID|SV-253908r879606_rule

STIG-ID|JUEX-NM-000310

Vuln-ID|V-253908

JUEX-NM-000320 - The Juniper EX switch must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.

800-53|IA-5(1)(b)

CCI|CCI-000195

Rule-ID|SV-253909r944345_rule

STIG-ID|JUEX-NM-000320

Vuln-ID|V-253909

JUEX-NM-000330 - The Juniper EX switch must be configured to only store cryptographic representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000196

Rule-ID|SV-253910r879608_rule

STIG-ID|JUEX-NM-000330

Vuln-ID|V-253910

JUEX-NM-000340 - The Juniper EX switch must be configured to use FIPS 140-2 approved algorithms for authentication to a cryptographic module.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-253911r944348_rule

STIG-ID|JUEX-NM-000340

Vuln-ID|V-253911

JUEX-NM-000350 - The Juniper EX switch must be configured to terminate all sessions and network connections when nonlocal device maintenance is completed.

800-53|MA-4e.

CCI|CCI-000879

Rule-ID|SV-253912r879621_rule

STIG-ID|JUEX-NM-000350

Vuln-ID|V-253912

JUEX-NM-000360 - The Juniper EX switch must be configured to end all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill mission requirements.

800-53|SC-10

CCI|CCI-001133

Rule-ID|SV-253913r916342_rule

STIG-ID|JUEX-NM-000360

Vuln-ID|V-253913

JUEX-NM-000370 - The Juniper device must be configured to only allow authorized administrators to view or change the device configuration, system files, and other files stored either in the device or on removable media (such as a flash drive).

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-253914r879642_rule

STIG-ID|JUEX-NM-000370

Vuln-ID|V-253914

JUEX-NM-000390 - The Juniper EX switch must be configured to enforce organization-defined role-based access control policies over defined subjects and objects.

800-53|AC-3(7)

800-53|CM-6b.

CCI|CCI-000366

CCI|CCI-002169

Rule-ID|SV-253916r879706_rule

STIG-ID|JUEX-NM-000390

Vuln-ID|V-253916

JUEX-NM-000410 - The Juniper EX switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

800-53|AU-4

CCI|CCI-001849

Rule-ID|SV-253918r879730_rule

STIG-ID|JUEX-NM-000410

Vuln-ID|V-253918

JUEX-NM-000420 - The Juniper EX switch must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts.

800-53|AU-5(2)

CCI|CCI-001858

Rule-ID|SV-253919r879733_rule

STIG-ID|JUEX-NM-000420

Vuln-ID|V-253919

JUEX-NM-000430 - The Juniper EX switch must be configured to synchronize internal information system clocks using redundant authoritative time sources.

800-53|AU-8(2)

CCI|CCI-001893

Rule-ID|SV-253920r879746_rule

STIG-ID|JUEX-NM-000430

Vuln-ID|V-253920

JUEX-NM-000440 - The Juniper EX switch must be configured to record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

800-53|AU-8b.

Detections

Analytics

DISA Juniper EX Series Network Device Management v1r5

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous