The Juniper SRX Services Gateway must have the number of rollbacks set to 5 or more.

From Juniper SRX SG NDM Security Technical Implementation Guide

Associated with: CCI-000366

SV-81085r1_rule The Juniper SRX Services Gateway must have the number of rollbacks set to 5 or more.

Vulnerability discussion

Backup of the configuration files allows recovery in case of corruption, misconfiguration, or catastrophic failure. The maximum number of rollbacks for the SRX is 50 while the default is 5 which is recommended as a best practice. Increasing this backup configuration number will result in increased disk usage and increase the number of files to manage. Organizations should not set the value to zero.

Check content

To view the current setting for maximum number of rollbacks enter the following command. [edit] show system max-configuration-rollbacks If the number of back up configurations is not set to an organization-defined value which is 5 or more, this is a finding.

Fix text

To configure number of backup configurations to be stored in the configuration partition enter the following command at the configuration hierarchy. [edit] set system max-configuration-rollbacks

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.