STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must authenticate NTP sources using authentication that is cryptographically based.

DISA Rule

SV-246950r961506_rule

Vulnerability Number

V-246950

Group Title

SRG-APP-000395-NDM-000347

Rule Version

NAOT-IA-000004

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure an authenticated NTP source using authentication that is cryptographically based with "cluster time-service ntp server create -server <ip_address> -key-id <NTP_Symmetric_Authentication_Key_ID>".

Check Contents

Use "cluster time-service ntp server show" to see authenticated NTP sources using authentication that is cryptographically based.

If any of the NTP servers listed has the field "Is Authentication Enabled" set to false, this is a finding.

Vulnerability Number

V-246950

Documentable

False

Rule Version

NAOT-IA-000004

Severity Override Guidance

Use "cluster time-service ntp server show" to see authenticated NTP sources using authentication that is cryptographically based.

If any of the NTP servers listed has the field "Is Authentication Enabled" set to false, this is a finding.

Check Content Reference

M

Target Key

5415