STIGQter: STIG Summary: Network Device Management Security Requirements Guide Version: 4 Release: 1 Benchmark Date: 23 Apr 2021:

The network device must authenticate Network Time Protocol sources using authentication that is cryptographically based.

DISA Rule

SV-202112r400051_rule

Vulnerability Number

V-202112

Group Title

SRG-APP-000395

Rule Version

SRG-APP-000395-NDM-000347

Severity

CAT II

CCI(s)

• CCI-001967 - The information system authenticates organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure the network device to authenticate Network Time Protocol sources using authentication that is cryptographically based.

Check Contents

Review the network device configuration to determine if the network device authenticates NTP endpoints before establishing a local, remote, or network connection using authentication that is cryptographically based.

If the network device does not authenticate Network Time Protocol sources using authentication that is cryptographically based, this is a finding.

Vulnerability Number

V-202112

Documentable

False

Rule Version

SRG-APP-000395-NDM-000347

Severity Override Guidance

Review the network device configuration to determine if the network device authenticates NTP endpoints before establishing a local, remote, or network connection using authentication that is cryptographically based.

If the network device does not authenticate Network Time Protocol sources using authentication that is cryptographically based, this is a finding.

Check Content Reference

M

Target Key

2890

Comments