The Juniper SRX Services Gateway must have the number of rollbacks set to 5 or more.
An XCCDF Rule
Description
<VulnDiscussion>Backup of the configuration files allows recovery in case of corruption, misconfiguration, or catastrophic failure. The maximum number of rollbacks for the SRX is 50 while the default is 5 which is recommended as a best practice. Increasing this backup configuration number will result in increased disk usage and increase the number of files to manage. Organizations should not set the value to zero.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-223204r961863_rule
- Severity
- Low
- References
- Updated
Remediation - Manual Procedure
To configure number of backup configurations to be stored in the configuration partition enter the following command at the configuration hierarchy.
[edit]
set system max-configuration-rollbacks <organization-defined number>