STIGQter: STIG Summary: Juniper Router NDM Security Technical Implementation Guide Version: 3 Release: 2 Benchmark Date: 30 Jan 2025:

The Juniper router must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.

DISA Rule

SV-217334r1015747_rule

Vulnerability Number

V-217334

Group Title

SRG-APP-000373-NDM-000298

Rule Version

JUNI-ND-001020

Severity

CAT II

CCI(s)

• CCI-004928 - Identify a secondary authoritative time source that is in a different geographic region than the primary authoritative time source.
• CCI-004922 - Synchronize system clocks within and between systems or system components.
• CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

Weight

10

Fix Recommendation

Configure the router to synchronize its clock with redundant authoritative time sources as shown in the example below.

[edit system ntp]
set server x.x.x.x
set server x.x.x.x prefer

Check Contents

Review the router configuration to verify that it is compliant with this requirement as shown in the configuration example below.

system {
…
…
…
}
ntp {
server x.x.x.x prefer;
server x.x.x.x;
}

If the router is not configured to synchronize its clock with redundant authoritative time sources, this is a finding.

Vulnerability Number

V-217334

Documentable

False

Rule Version

JUNI-ND-001020

Severity Override Guidance

Review the router configuration to verify that it is compliant with this requirement as shown in the configuration example below.

system {
…
…
…
}
ntp {
server x.x.x.x prefer;
server x.x.x.x;
}

If the router is not configured to synchronize its clock with redundant authoritative time sources, this is a finding.

Check Content Reference

M

Target Key

4034