STIGQter: STIG Summary: Juniper SRX SG NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

For local accounts using password authentication (i.e., the root account and the account of last resort), the Juniper SRX Services Gateway must enforce password complexity by setting the password change type to character sets.

DISA Rule

SV-223218r513343_rule

Vulnerability Number

V-223218

Group Title

SRG-APP-000166-NDM-000254

Rule Version

JUSX-DM-000129

Severity

CAT II

CCI(s)

• CCI-000192 - The information system enforces password complexity by the minimum number of upper case characters used.

Weight

10

Fix Recommendation

Configure the default local password to enforce password complexity by setting the password change type to character sets

[edit]
set system login password change-type character-sets

Check Contents

Verify the default local password enforces password complexity by setting the password change type to character sets

[edit]
show system login password

If the password change-type is not set to character-sets, this is a finding.

Vulnerability Number

V-223218

Documentable

False

Rule Version

JUSX-DM-000129

Severity Override Guidance

Verify the default local password enforces password complexity by setting the password change type to character sets

[edit]
show system login password

If the password change-type is not set to character-sets, this is a finding.

Check Content Reference

M

Target Key

4098

Comments