The Juniper SRX Services Gateway must terminate the console session when the serial cable connected to the console port is unplugged.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-66601	JUSX-DM-000154	SV-81091r1_rule		Low

Description
If a device management session or connection remains open after management is completed, it may be hijacked by an attacker and used to compromise or damage the network device.

STIG	Date
Juniper SRX SG NDM Security Technical Implementation Guide	2017-01-05

Details

Check Text ( C-67227r1_chk )
Verify this setting by entering the following commands in configuration mode. [edit] show system ports console If the log-out-on-disconnect is not set for the console port, this is a finding.

Fix Text (F-72677r1_fix)
Configure this setting by entering the following commands in configuration mode. [edit] system ports console set log-out-on-disconnect