STIGQter: STIG Summary: Juniper SRX SG NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Juniper SRX Services Gateway must immediately terminate SSH network connections when the user logs off, the session abnormally terminates, or an upstream link from the managed device goes down.

DISA Rule

SV-223229r513376_rule

Vulnerability Number

V-223229

Group Title

SRG-APP-000186-NDM-000266

Rule Version

JUSX-DM-000153

Severity

CAT II

CCI(s)

• CCI-000879 - The organization terminates sessions and network connections when nonlocal maintenance is completed.

Weight

10

Fix Recommendation

Configure the SSH keep-alive value.

[edit]
set system services ssh client-alive-count-max <organization-defined value>
set system services ssh client-alive-interval <organization-defined value>

Note: The keep-alive value and the interval between keep-alive messages must be set based on mission requirements and network performance for each local network.

Check Contents

[edit]
show system services ssh

If the keep-alive count and keep-alive interval are not set to an organization-defined value, this is a finding.

Vulnerability Number

V-223229

Documentable

False

Rule Version

JUSX-DM-000153

Severity Override Guidance

[edit]
show system services ssh

If the keep-alive count and keep-alive interval are not set to an organization-defined value, this is a finding.

Check Content Reference

M

Target Key

4098

Comments