STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must be configured to synchronize internal information system clocks using redundant authoritative time sources.

DISA Rule

SV-270644r1052341_rule

Vulnerability Number

V-270644

Group Title

SRG-APP-000920-NDM-000320

Rule Version

OS10-NDM-000680

Severity

CAT II

CCI(s)

• CCI-004922 - Synchronize system clocks within and between systems or system components.
• CCI-004923 - Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

Weight

10

Fix Recommendation

Configure the OS10 Switch to synchronize internal information system clocks with the primary and secondary time sources:

OS10(config)# ntp authenticate
OS10(config)# ntp trusted-key 345
OS10(config)# ntp authentication-key 345 sha2-256 0 <key>
OS10(config)# ntp server 192.0.2.1 key 345 prefer
OS10(config)# ntp server 192.0.2.5 key 345

Check Contents

Determine if the OS10 Switch is configured to synchronize internal information system clocks with the primary and secondary time sources.

Review the configuration to verify that the primary and secondary time sources are configured as NTP servers with the following commands:

OS10# show running-configuration ntp
!
ntp authenticate
ntp authentication-key 345 sha2-256 9 ****
ntp server 192.0.2.1 key 345 prefer
ntp server 192.0.2.5 key 345
ntp trusted-key 345

If the OS10 Switch is not configured to synchronize internal information system clocks with the primary and secondary time sources, this is a finding.

Vulnerability Number

V-270644

Documentable

False

Rule Version

OS10-NDM-000680

Severity Override Guidance

Determine if the OS10 Switch is configured to synchronize internal information system clocks with the primary and secondary time sources.

Review the configuration to verify that the primary and secondary time sources are configured as NTP servers with the following commands:

OS10# show running-configuration ntp
!
ntp authenticate
ntp authentication-key 345 sha2-256 9 ****
ntp server 192.0.2.1 key 345 prefer
ntp server 192.0.2.5 key 345
ntp trusted-key 345

If the OS10 Switch is not configured to synchronize internal information system clocks with the primary and secondary time sources, this is a finding.

Check Content Reference

M

Target Key

5666