- play_arrow Get Started
- Mist Configuration Hierarchy
- Admin Menu Overview
- Initial Configuration Tasks
- Create Your Account and Organization
- play_arrow Account Settings and Preferences
- play_arrow Your Organization
- Organization Settings (Page Reference)
- Find Your Organization ID
- Rename an Organization
- Delete an Organization
- Set a Password Policy for Your Organization
- Configure Session Policies
- Integrate Your Juniper Support Account with Juniper Mist
- Access Apstra Cloud Services
- Add Routing Assurance to the Mist Portal
- play_arrow Subscriptions and Orders
- play_arrow Device Management
- play_arrow Sites
- play_arrow Help and Support
Security Options
Use the information in this chapter to configure your firewall, select security options for your organization, control access to the Juniper Mist portal, and monitor logins. Also explore additional resources about the security features of the Juniper Mist cloud, data privacy at Juniper, and setting up security in your wireless, wired, or WAN configuration.
End support for cipher suites using Cipher Block Chaining (CBC)
Juniper Mist has ended support of cipher suites using the Cipher Block Chaining (CBC). These cipher suites are known to be susceptible to attacks such as padding oracle attack, which can lead to data leaks and other security issues. This change affects the systems and software that rely on the following cipher suites to interact with Juniper Mist API and Mist Dashboard:
- ECDHE-ECDSA-AES128-SHA256
- ECDHE-RSA-AES128-SHA256
- ECDHE-ECDSA-AES256-SHA384
- ECDHE-RSA-AES256-SHA384
The following ciphers are supported for TLS 1.2+ protocols (Server Preferred Order):
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
More Information
A cipher suite is a cryptographic algorithm set to secure network communications. CBC is a mode of operation for block ciphers commonly used in Transport Layer Security (TLS) and Secure Sockets Layer (SSL) protocols. Therefore, modern security standards recommend using more secure cipher suites, such as Galois/Counter Mode (GCM).
