Detections
Analytics

DISA Juniper SRX Services Gateway NDM v3r2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA Juniper SRX Services Gateway NDM v3r2

Updated: 9/16/2025

Authority: DISA STIG

Plugin: Juniper

Revision: 1.1

Estimated Item Count: 68

File Details

Filename: DISA_STIG_Juniper_SRX_Services_Gateway_NDM_v3r2.audit

Size: 160 kB

MD5: c685236050eeb314cb28b57ef071a338
SHA256: d5d03e1a0e142d31fe1195d828f0f30534bf7aae51ebb01c1c79279143ecb217

Audit Changelog

 
Revision 1.1

Sep 16, 2025

Functional Update
  • JUSX-DM-000136 - For local accounts using password authentication (i.e., the root account and the account of last resort) the Juniper SRX Services Gateway must use the SHA1 or later protocol for password authentication.
  • JUSX-DM-000146 - For nonlocal maintenance sessions using SNMP, the Juniper SRX Services Gateway must use and securely configure SNMPv3 with SHA to protect the integrity of maintenance and diagnostic communications.
  • JUSX-DM-000147 - For nonlocal maintenance sessions using SSH, the Juniper SRX Services Gateway must securely configure SSHv2 Message Authentication Code (MAC) algorithms to protect the integrity of maintenance and diagnostic communications.
  • JUSX-DM-000150 - For nonlocal maintenance sessions using SSH, the Juniper SRX Services Gateway must securely configured SSHv2 with privacy options to protect the confidentiality of maintenance and diagnostic communications for nonlocal maintenance sessions.
Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Removed
  • JUSX-DM-000110 - The Juniper SRX Services Gateway must authenticate NTP servers before establishing a network connection using bidirectional authentication that is cryptographically based.