STIGQter: STIG Summary: Ivanti Sentry 9.x NDM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Oct 2024:

Sentry must be configured to synchronize internal information system clocks using redundant authoritative time sources.

DISA Rule

SV-250999r1029564_rule

Vulnerability Number

V-250999

Group Title

SRG-APP-000373-NDM-000298

Rule Version

MOIS-ND-000700

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-004928 - Identify a secondary authoritative time source that is in a different geographic region than the primary authoritative time source.

Weight

10

Fix Recommendation

Configure the Sentry with multiple date and time servers (NTP).

1. Log in to Sentry.
2. Go to Settings >> Date and Time (NTP).
3. Under Time Source dropdown, select "NTP".
4. Enter at least Primary and Secondary NTP servers.
5. Click "Apply" and "Save" in the top right corner.

Refer to the "Date and Time (NTP)" section of the "Sentry 9.8.0 Guide for MobileIron Core" for more information.

Check Contents

Verify the Sentry is configured with multiple date and time servers (NTP).

1. Log in to Sentry.
2. Go to Settings >> Date and Time (NTP).
3. Verify the NTP servers are configured.

If NTP servers are not configured, this is a finding.

Refer to the "Date and Time (NTP)" section of the "Sentry 9.8.0 Guide for MobileIron Core" for more information.

Vulnerability Number

V-250999

Documentable

False

Rule Version

MOIS-ND-000700

Severity Override Guidance

Verify the Sentry is configured with multiple date and time servers (NTP).

1. Log in to Sentry.
2. Go to Settings >> Date and Time (NTP).
3. Verify the NTP servers are configured.

If NTP servers are not configured, this is a finding.

Refer to the "Date and Time (NTP)" section of the "Sentry 9.8.0 Guide for MobileIron Core" for more information.

Check Content Reference

M

Target Key

5438