STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured to synchronize internal information system clocks using redundant authoritative time sources.

DISA Rule

SV-246936r1015268_rule

Vulnerability Number

V-246936

Group Title

SRG-APP-000373-NDM-000298

Rule Version

NAOT-AU-000004

Severity

CAT II

CCI(s)

• CCI-004928 - Identify a secondary authoritative time source that is in a different geographic region than the primary authoritative time source.

Weight

10

Fix Recommendation

Configure network time protocol for ONTAP with "cluster time-service ntp server create -server <IP address>" to add new ntp servers. Up to 10 servers can be defined.

Check Contents

Use "cluster time-service ntp server show" to view the current network time protocol configuration for ONTAP and ensure at least two ntp servers are defined.

If ONTAP is not configured to synchronize internal information system clocks using redundant authoritative time sources, this is a finding.

Vulnerability Number

V-246936

Documentable

False

Rule Version

NAOT-AU-000004

Severity Override Guidance

Use "cluster time-service ntp server show" to view the current network time protocol configuration for ONTAP and ensure at least two ntp servers are defined.

If ONTAP is not configured to synchronize internal information system clocks using redundant authoritative time sources, this is a finding.

Check Content Reference

M

Target Key

5415