Skip to content

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000512-L2S-000010

    Group
  • The Juniper EX switch must not use the default VLAN for management traffic.

    By default, all unassigned interfaces are placed into the default VLAN and if used for management, could unintentionally expose sensitive traffic or protected resources to unauthorized devices.
    Rule Medium Severity
  • SRG-NET-000512-L2S-000011

    Group
  • The Juniper EX switch must be configured to set all user-facing or untrusted ports as access interfaces.

    Configuring user-facing or untrusted interfaces as trunked may expose network traffic to an unauthorized, or unintended, connected endpoint. Access interfaces can belong to a single VLAN rather tha...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000012

    Group
  • The Juniper EX switch must not have a native VLAN ID assigned, or have a unique native VLAN ID, for all 802.1q trunk links.

    By default, Juniper switches do not assign a native VLAN to any trunked interface. Allowing trunked interfaces to accept untagged data packets may unintentionally expose VLANs to unauthorized devic...
    Rule Medium Severity
  • SRG-NET-000512-L2S-000013

    Group
  • The Juniper EX switch must not have any access interfaces assigned to a VLAN configured as native for any trunked interface.

    Trunked interfaces without an assigned native VLAN do not accept untagged data packets. Allowing trunked interfaces to accept untagged data packets may unintentionally expose VLANs to unauthorized ...
    Rule Low Severity
  • SRG-NET-000131-L2S-000014

    Group
  • The Juniper EX switch must be configured to disable non-essential capabilities.

    A compromised switch introduces risk to the entire network infrastructure as well as data resources that are accessible via the network. The perimeter defense has no oversight or control of attacks...
    Rule High Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules