STIGQter: STIG Summary: Juniper SRX SG NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Juniper SRX Services Gateway must automatically terminate a network administrator session after organization-defined conditions or trigger events requiring session disconnect.

DISA Rule

SV-229014r518220_rule

Vulnerability Number

V-229014

Group Title

SRG-APP-000516-NDM-000317

Rule Version

JUSX-DM-000007

Severity

CAT II

CCI(s)

• CCI-000169 - The information system provides audit record generation capability for the auditable events defined in AU-2 a. at organization-defined information system components.
• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

To configure user access on specific days of the week for a specified duration, include the allowed-days, access-start, and access-end statements. The following is an example of a configuration for a class which would automatically log out users. Consult the Juniper SRX documentation for other options.

[edit system login]
class class-name allowed-days [ days-of-the-week ];
class class-name access-start HH:MM;
class class-name access-end HH:MM;

Check Contents

If the organization does not have a requirement for triggered, automated logout, this is not a finding.

Obtain a list of organization-defined triggered, automated requirements that are required for the Juniper SRX.

To verify configuration of special user access controls.

[edit]
show system login

View time-based or other triggers which are configured to control automated logout.

If the organization has documented requirements for triggered, automated termination and they are not configured, this is a finding.

Vulnerability Number

V-229014

Documentable

False

Rule Version

JUSX-DM-000007

Severity Override Guidance

If the organization does not have a requirement for triggered, automated logout, this is not a finding.

Obtain a list of organization-defined triggered, automated requirements that are required for the Juniper SRX.

To verify configuration of special user access controls.

[edit]
show system login

View time-based or other triggers which are configured to control automated logout.

If the organization has documented requirements for triggered, automated termination and they are not configured, this is a finding.

Check Content Reference

M

Target Key

4098

Comments