Re: Juniper hardening template ? (was Re: Configuration testing tools for Juniper switches?)

["Ivan ." <ivanhec () gmail com>]

see here

http://www.cymru.com/gillsr/documents.html

loopback firewalls filter are what you want at minimum, which will
protect the router from traffic directed to it

cheers
Ivan

On Sat, Jun 19, 2010 at 6:32 AM, Roger Gill <roger () itnetsec co nz> wrote:
> Further to John's request does anyone know where I may find a template or
> guide for hardening Juniper routers and switches?
>
> Basically I'm looking for the equivalent to NSA's security configuration
> guides for Cisco switches and routers, or the great guides for Cisco at CIS
> and www.iso27001security.com; I just cannot find anything on Juniper...
>
> many thanks
> Roger
>
> On 18/06/2010 3:34 p.m., John R. Smith wrote:
> > The Cisco gear (routers, switches, firewalls) configs can be analyzed
> >  using CIS' RAT or Nipper. Is there any similar tool for Juniper based
> > switches?
> >
> > Thanks in advance!
> > -John
> >
> > ------------------------------------------------------------------------
> > This list is sponsored by: Information Assurance Certification Review
> > Board
> >
> > Prove to peers and potential employers without a doubt that you can
> > actually do a proper penetration test. IACRB CPT and CEPT certs require a
> > full practical examination in order to become certified.
> > http://www.iacertification.org
> > ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually
> do a proper penetration test. IACRB CPT and CEPT certs require a full
> practical examination in order to become certified.
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------