JUSX-IP-000030 - The Juniper Networks SRX Series Gateway IDPS must have only active Juniper Networks licenses.

Information

If the IDP or UTM licenses are allowed to lapse, the Juniper SRX IDPS can still inspect traffic and continue to use the outdated signature database for rules, objects, and dynamic groups. However, updates to the signature database cannot be downloaded from Juniper Networks. This puts the network at risk since the updates are used to addresses new CERT and IAVM vulnerabilities.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Update the expired licenses immediately following the procedures on the vendor website.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Juniper_SRX_SG_Y24M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-214636r385561_rule, STIG-ID|JUSX-IP-000030, STIG-Legacy|SV-80929, STIG-Legacy|V-66439, Vuln-ID|V-214636

Plugin: Juniper

Control ID: 8a40691b7eb85a8b7d4c21075423d53a3bfa165dbfc8754769f76c82d748f193