STIGQter: STIG Summary: Riverbed NetProfiler Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Riverbed NetProfiler must be configured to synchronize internal information system clocks using redundant authoritative time sources.

DISA Rule

SV-256085r1015803_rule

Vulnerability Number

V-256085

Group Title

SRG-APP-000373-NDM-000298

Rule Version

RINP-DM-000047

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-004928 - Identify a secondary authoritative time source that is in a different geographic region than the primary authoritative time source.
• CCI-004922 - Synchronize system clocks within and between systems or system components.

Weight

10

Fix Recommendation

Go to Administration >> General Settings.

Under "Time Configuration", configure the IP address for at least both Server 1 and Server 2.

Select the type of encryption and configure both the key and index for each of the server entries.

Check Contents

Go to Administration >> General Settings.

Under "Time Configuration", verify that at least the IP address for both Server 1 and Server 2 has been configured.

If redundant time servers have not been configured, this is a finding.

Vulnerability Number

V-256085

Documentable

False

Rule Version

RINP-DM-000047

Severity Override Guidance

Go to Administration >> General Settings.

Under "Time Configuration", verify that at least the IP address for both Server 1 and Server 2 has been configured.

If redundant time servers have not been configured, this is a finding.

Check Content Reference

M

Target Key

5514