Review the switch configuration and verify the switch does not have an unnecessary or non-secure services enabled. For example, the following directives should not be in the configuration (deleted) or, if present, must be disabled (inactive): Verify the following commands are not present: [edit system services] finger; ftp; rlogin; telnet; xnm-clear-text; tftp; rest { http; } web-management { http; https; } Note: If the services listed above are marked "inactive", they are not enabled. For example, although the FTP stanza is present in the following snippet, it is disabled (inactive): [edit system services] inactive: ftp; Because J-Web was not included in the FIPS certification, verify the web-management process is disabled. [edit system services] web-management disable; If any unnecessary services are enabled, this is a finding.