STIGQter: STIG Summary: VMware NSX-T Manager NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 26 Jul 2023:

The NSX-T Manager must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).

DISA Rule

SV-251783r879747_rule

Vulnerability Number

V-251783

Group Title

SRG-APP-000374-NDM-000299

Rule Version

TNDM-3X-000069

Severity

CAT II

CCI(s)

• CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.

Weight

10

Fix Recommendation

To configure a profile to apply NTP servers to all NSX-T Manager nodes, do the following:

From the NSX-T Manager web interface, go to System >> Fabric >> Profiles >> Node Profiles. Click "All NSX Nodes", and then click "Edit".

In the time zone drop-down list, select "UTC", and then click "Save".

or

From an NSX-T Manager shell, run the following command(s):

> set timezone UTC

Note: This fix must be run from each NSX-T Manager as they are configured individually if done from the command line.

Check Contents

From the NSX-T Manager web interface, go to System >> Fabric >> Profiles >> Node Profiles. Click "All NSX Nodes" and verify the time zone.

or

From an NSX-T Manager shell, run the following command(s):

> get clock

If system clock is not configured with the UTC time zone, this is a finding.

Note: This check must be run from each NSX-T Manager as they are configured individually if done from the command line.

Vulnerability Number

V-251783

Documentable

False

Rule Version

TNDM-3X-000069

Severity Override Guidance

From the NSX-T Manager web interface, go to System >> Fabric >> Profiles >> Node Profiles. Click "All NSX Nodes" and verify the time zone.

or

From an NSX-T Manager shell, run the following command(s):

> get clock

If system clock is not configured with the UTC time zone, this is a finding.

Note: This check must be run from each NSX-T Manager as they are configured individually if done from the command line.

Check Content Reference

M

Target Key

5449