JUEX-NM-000630 - The Juniper EX switch must be configured to enforce access restrictions associated with changes to the system components.

Information

Changes to the hardware or software components of the network device can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals should be allowed administrative access to the network device for implementing any changes or upgrades. This requirement applies to updates of the application files, configuration, firewall filters, and policy filters.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the network device to enforce access restrictions associated with changes to the system components.

set system login class <name> permissions <permission sets or 'all'>
set system login class <name> deny-commands <appropriate commands to deny>
set system login class <name> deny-configuration-regexps <appropriate configuration hierarchy to deny>

set system login user <account name> class <name>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Juniper_EX_Switches_Y24M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5, 800-53|CM-6b., CAT|II, CCI|CCI-000345, CCI|CCI-000366, Rule-ID|SV-253940r961863_rule, STIG-ID|JUEX-NM-000630, Vuln-ID|V-253940

Plugin: Juniper

Control ID: e48bc475d68c87259642bb8e678766cffa0a7cb3dc642a1976912e6c48236c60