STIGQter: STIG Summary: Juniper Router NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 24 Jul 2020:

The Juniper router must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

DISA Rule

SV-101259r1_rule

Vulnerability Number

V-91159

Group Title

SRG-APP-000374-NDM-000299

Rule Version

JUNI-ND-001030

Severity

CAT II

CCI(s)

• CCI-001890 - The information system records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Weight

10

Fix Recommendation

[edit system]
set time-zone UTC

Check Contents

Review the router configuration to verify that it is compliant with this requirement as shown in the example below.

system {
time-zone UTC;

Note: UTC is the default; hence, the command set time-zone may not be seen in the configuration. This can be verified using the show system uptime command.

If the router is not configured record time stamps for log records that can be mapped to UTC or GMT, this is a finding.

Vulnerability Number

V-91159

Documentable

False

Rule Version

JUNI-ND-001030

Severity Override Guidance

Review the router configuration to verify that it is compliant with this requirement as shown in the example below.

system {
time-zone UTC;

Note: UTC is the default; hence, the command set time-zone may not be seen in the configuration. This can be verified using the show system uptime command.

If the router is not configured record time stamps for log records that can be mapped to UTC or GMT, this is a finding.

Check Content Reference

M

Target Key

3381

Comments