STIGQter: STIG Summary: Network WLAN AP-IG Management Security Technical Implementation Guide Version: 7 Release: 2 Benchmark Date: 25 Oct 2023:

The network device must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.

DISA Rule

SV-243149r879768_rule

Vulnerability Number

V-243149

Group Title

SRG-APP-000395-NDM-000347

Rule Version

WLAN-ND-001600

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure the device to authenticate all received NTP messages using a FIPS-approved message authentication code algorithm.

Check Contents

Review the network device configuration to determine if the network device authenticates NTP endpoints before establishing a local, remote, or network connection using authentication that is cryptographically based.

If the network device does not authenticate Network Time Protocol sources using authentication that is cryptographically based, this is a finding.

Vulnerability Number

V-243149

Documentable

False

Rule Version

WLAN-ND-001600

Severity Override Guidance

Review the network device configuration to determine if the network device authenticates NTP endpoints before establishing a local, remote, or network connection using authentication that is cryptographically based.

If the network device does not authenticate Network Time Protocol sources using authentication that is cryptographically based, this is a finding.

Check Content Reference

M

Target Key

5391