Juniper SRX SG NDM Security Technical Implementation Guide

The Juniper SRX SG NDM Security Technical Implementation Guide (V3 R2) has 69 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

69STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V3 · R2

ArchivedPublished Thu Oct 24 2024

The Juniper SRX Services Gateway must generate log records when privileged commands are executed.

Juniper SRX SG NDM Security Technical Implementation Guide

Assessment Title

Rule Text

The Juniper SRX Services Gateway must generate log records when privileged commands are executed.

Description

Discussion Text

Without generating log records that are specific to the security and mission needs of the organization, it would be difficult to establish, correlate, and investigate the events relating to an incident or identify those responsible for one.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-223195

Rule

SV-223195r961827_rule

Severity

low

Rule Version

JUSX-DM-000044

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the device generates a log when login events occur.

[edit]
show system syslog

host <syslog server address> {
  any any;
  source-address <device address>;
}

If an external syslog host is not configured to log, or configured for facility any severity any, this is a finding.

Implementation Procedure

Fix Text

Configure at least one external syslog host to log facility any and severity info or any. There are multiple ways to accomplish this, the following is an example.

[edit system syslog]
set host <syslog server address> any any

STIG check 15 of 69 in the Juniper SRX SG NDM STIG checklist

← Previous · V-223194The Juniper SRX Services Gateway must generate log records when logon events occur.Next · V-223196 →The Juniper SRX Services Gateway must generate log records when concurrent logons from different workstations occur.