STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.

DISA Rule

SV-269794r1051767_rule

Vulnerability Number

V-269794

Group Title

SRG-APP-000395-NDM-000347

Rule Version

OS10-NDM-000750

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure the OS10 Switch to authenticate NTP sources using authentication that is cryptographically based:

OS10(config)# ntp authenticate
OS10(config)# ntp trusted-key 345
OS10(config)# ntp authentication-key 345 sha2-256 0 <key>
OS10(config)# ntp server 192.0.2.1 key 345 preferred
OS10(config)# ntp server 192.0.2.5 key 345

Check Contents

Review the OS10 Switch configuration to determine if the network device authenticates NTP endpoints before establishing a local, remote, or network connection using authentication that is cryptographically based.

Review the configuration to verify that NTP authentication is configured when communicating with the NTP servers with the following commands:

OS10# show running-configuration ntp
!
ntp authenticate
ntp authentication-key 345 sha2-256 9 ****
ntp server 192.0.2.1 key 345 prefer
ntp server 192.0.2.5 key 345
ntp trusted-key 345

If the OS10 Switch not authenticate NTP sources using authentication that is cryptographically based, this is a finding.

Vulnerability Number

V-269794

Documentable

False

Rule Version

OS10-NDM-000750

Severity Override Guidance

Review the OS10 Switch configuration to determine if the network device authenticates NTP endpoints before establishing a local, remote, or network connection using authentication that is cryptographically based.

Review the configuration to verify that NTP authentication is configured when communicating with the NTP servers with the following commands:

OS10# show running-configuration ntp
!
ntp authenticate
ntp authentication-key 345 sha2-256 9 ****
ntp server 192.0.2.1 key 345 prefer
ntp server 192.0.2.5 key 345
ntp trusted-key 345

If the OS10 Switch not authenticate NTP sources using authentication that is cryptographically based, this is a finding.

Check Content Reference

M

Target Key

5666