Juniper Device - Hardening & Best Practices

[gcampbe9]

We have purchased a large amount of Juniper hardware for a project, namely EX switches, SRX routers, NSMXpress Series II, NSM Central manager and ISG firewalls.

I have been tasked with creating a best practice and hardening document for these devices and cannot find very much in searching the Juniper site or the web in general.

So I have to turn to experience and exposure of people who may have already done something similar r know the location of engineering level documents (how, why and fixes etc), which will allow me to provide a comprehensive template for all these devices.

Can anyone at Juniper or elsewhere advise if such documentation exists and for all of these devices?

Thanks & Regards

[spuluka]

There is a publication in the "Day One" series that address this topic.

This Week Hardening Junos Devices

http://forums.juniper.net/t5/Day-One-Books/This-Week-Hardening-Junos-Devices/ba-p/117366

[aweck]

You can also check out this if you're so inclined:

http://benchmarks.cisecurity.org/en-us/?route=downloads.show.single.junos.101