Home
Security Hardening
DISA STIG Juniper Router NDM V1R5

DISA STIG Juniper Router NDM V1R5

JUNI-ND-000490 – The Juniper router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – auth order
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
JUNI-ND-000120 – The Juniper router must be configured to automatically audit account removal actions.
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
JUNI-ND-000490 – The Juniper router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – LAST_RESORT
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
JUNI-ND-000140 – The Juniper router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – filter
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
JUNI-ND-000140 – The Juniper router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – loopback
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
JUNI-ND-000150 – The Juniper router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – lockout-period
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
JUNI-ND-000150 – The Juniper router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – tries-before-disconnect
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
JUNI-ND-000160 – The Juniper router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
Details Display of the DoD-approved use notification before granting access to the network device ensures privacy and security notification verbiage...
JUNI-ND-000210 – The Juniper router must be configured to protect against an individual falsely denying having performed organization-defined actions to be covered by non-repudiation.
Details This requirement supports non-repudiation of actions taken by an administrator and is required in order to maintain the integrity...
JUNI-ND-000250 – The Juniper router must be configured to generate audit records when successful/unsuccessful attempts to logon with access privileges occur.
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...

Prev Next

DISA STIG Juniper Router NDM V1R5

JUNI-ND-000490 – The Juniper router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – auth order

JUNI-ND-000120 – The Juniper router must be configured to automatically audit account removal actions.

JUNI-ND-000490 – The Juniper router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – LAST_RESORT

JUNI-ND-000140 – The Juniper router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – filter

JUNI-ND-000140 – The Juniper router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – loopback

JUNI-ND-000150 – The Juniper router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – lockout-period

JUNI-ND-000150 – The Juniper router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – tries-before-disconnect

JUNI-ND-000160 – The Juniper router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

JUNI-ND-000210 – The Juniper router must be configured to protect against an individual falsely denying having performed organization-defined actions to be covered by non-repudiation.

JUNI-ND-000250 – The Juniper router must be configured to generate audit records when successful/unsuccessful attempts to logon with access privileges occur.