STIGQter: STIG Summary: HPE Nimble Storage Array NDM Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The HPE Nimble must be configured to synchronize internal information system clocks using an authoritative time source.

DISA Rule

SV-252202r1001011_rule

Vulnerability Number

V-252202

Group Title

SRG-APP-000373-NDM-000298

Rule Version

HPEN-NM-000271

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-004928 - Identify a secondary authoritative time source that is in a different geographic region than the primary authoritative time source.
• CCI-004922 - Synchronize system clocks within and between systems or system components.

Weight

10

Fix Recommendation

Configure the HPE Nimble Array to synchronize internal information system clocks with the primary time source:

ArrayA:/# group --edit --ntpserver <ip_address_of_ntp_server>

There would be a finding here given we only support primary ntp source.

Check Contents

To Determine if the HPE Nimble Array is configured to synchronize internal information system clocks with the primary NTP server:

ArrayA:/# ntpq
ntpq> sysinfo
associd=0 status=0615 leap_none, sync_ntp, 1 event, clock_sync,
system peer: cxo-nmbldc-01.nimblestorage.com:123
system peer mode: client
leap indicator: 00
stratum: 4
log2 precision: -24
root delay: 37.321
root dispersion: 265.639
reference ID: 10.157.24.95
reference time: e509b178.9f897118 Thu, Oct 7 2021 11:48:40.623
system jitter: 0.000000
clock jitter: 0.673
clock wander: 0.003
broadcast delay: -50.000
symm. auth. delay: 0.000

If the HPE Storage Array is not configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources, this is a finding.

Vulnerability Number

V-252202

Documentable

False

Rule Version

HPEN-NM-000271

Severity Override Guidance

To Determine if the HPE Nimble Array is configured to synchronize internal information system clocks with the primary NTP server:

ArrayA:/# ntpq
ntpq> sysinfo
associd=0 status=0615 leap_none, sync_ntp, 1 event, clock_sync,
system peer: cxo-nmbldc-01.nimblestorage.com:123
system peer mode: client
leap indicator: 00
stratum: 4
log2 precision: -24
root delay: 37.321
root dispersion: 265.639
reference ID: 10.157.24.95
reference time: e509b178.9f897118 Thu, Oct 7 2021 11:48:40.623
system jitter: 0.000000
clock jitter: 0.673
clock wander: 0.003
broadcast delay: -50.000
symm. auth. delay: 0.000

If the HPE Storage Array is not configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources, this is a finding.

Check Content Reference

M

Target Key

5460