Details

Unused interfaces should be explicitly disabled.

Rationale:

JUNOS routers can be installed with tens or even hundreds of physical interfaces of different types. To ensure that unused interfaces are not connected to networks, either accidently or by a malicious user seeking to bypass security measures, all unused interfaces should be explicitly disabled.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To disable an interface enter the following command from the [edit interfaces ] hierarchy.

[edit interfaces ]
[email protected]#set disable

Default Value:

Installed physical interfaces are enabled by default on most platforms.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3069

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Juniper.

References

• 800-53|SI-4
• CSCv7|9.2

Source

• Tenable.com/audits