STIGQter: STIG Summary: F5 BIG-IP TMOS NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 02 Jul 2025:

The F5 BIG-IP appliance must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).

DISA Rule

SV-266077r1024609_rule

Vulnerability Number

V-266077

Group Title

SRG-APP-000374-NDM-000299

Rule Version

F5BI-DM-300037

Severity

CAT II

CCI(s)

• CCI-001890 - Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.

Weight

10

Fix Recommendation

From the BIG-IP GUI:
1. System.
2. Platform.
3. Set "UTC" for "Time Zone".
4. Click "Update".

From the BIG-IP Console, issue the following commands:

tmsh modify sys ntp timezone UTC
tmsh save sys config

Check Contents

From the BIG-IP GUI:
1. System.
2. Platform.
3. Verify that "UTC" is configured for "Time Zone".

From the BIG-IP Console, issue the following commands:

tmsh list sys ntp timezone

Note: This must return a value of "UTC".

If the BIG-IP appliance is not configured for the UTC time zone, this is a finding.

Vulnerability Number

V-266077

Documentable

False

Rule Version

F5BI-DM-300037

Severity Override Guidance

From the BIG-IP GUI:
1. System.
2. Platform.
3. Verify that "UTC" is configured for "Time Zone".

From the BIG-IP Console, issue the following commands:

tmsh list sys ntp timezone

Note: This must return a value of "UTC".

If the BIG-IP appliance is not configured for the UTC time zone, this is a finding.

Check Content Reference

M

Target Key

5639