STIGQter: STIG Summary: Fortinet FortiGate Firewall NDM Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 05 Jan 2026:

The FortiGate device must synchronize internal information system clocks using redundant authoritative time sources.

DISA Rule

SV-234183r987682_rule

Vulnerability Number

V-234183

Group Title

SRG-APP-000373-NDM-000298

Rule Version

FGFW-ND-000120

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:

# config system ntp
# set ntpsync enable
# set type custom
# set syncinterval {INTEGER}
To add NTP server 1:
# config ntpserver
# edit {ID}
# set server {IP ADDRESS}
# set authentication enable
# set key {PASSWORD}
# set key-id {INTEGER}
# next
To add NTP server 2:
# config ntpserver
# edit {ID}
# set server {IP ADDRESS}
# set authentication enable
# set key {PASSWORD}
# set key-id {INTEGER}
# next
# end

Check Contents

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration system ntp | grep server

The output should be:
set server {IP address of NTP server 1}
set server {IP address of NTP server 2}

If the internal information system clocks are not configured to synchronize with the primary and secondary time sources, this is a finding.

Vulnerability Number

V-234183

Documentable

False

Rule Version

FGFW-ND-000120

Severity Override Guidance

Log in to the FortiGate GUI with Super-Admin privilege.

1. Open a CLI console, via SSH or available from the GUI.
2. Run the following command:
# show full-configuration system ntp | grep server

The output should be:
set server {IP address of NTP server 1}
set server {IP address of NTP server 2}

If the internal information system clocks are not configured to synchronize with the primary and secondary time sources, this is a finding.

Check Content Reference

M

Target Key

5260