STIGQter STIGQter: STIG Summary: Juniper Router NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 24 Jul 2020:

The Juniper router must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.

DISA Rule

SV-101257r1_rule

Vulnerability Number

V-91157

Group Title

SRG-APP-000373-NDM-000298

Rule Version

JUNI-ND-001020

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the router to synchronize its clock with redundant authoritative time sources as shown in the example below.

[edit system ntp]
set server x.x.x.x
set server x.x.x.x prefer

Check Contents

Review the router configuration to verify that it is compliant with this requirement as shown in the configuration example below.

system {



}
ntp {
server x.x.x.x prefer;
server x.x.x.x;
}

If the router is not configured to synchronize its clock with redundant authoritative time sources, this is a finding.

Vulnerability Number

V-91157

Documentable

False

Rule Version

JUNI-ND-001020

Severity Override Guidance

Review the router configuration to verify that it is compliant with this requirement as shown in the configuration example below.

system {



}
ntp {
server x.x.x.x prefer;
server x.x.x.x;
}

If the router is not configured to synchronize its clock with redundant authoritative time sources, this is a finding.

Check Content Reference

M

Target Key

3381

Comments