STIGQter: STIG Summary: Dragos Platform 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Apr 2026:

Before establishing a network connection with a Network Time Protocol (NTP) server, Dragos Platform must authenticate using a bidirectional, cryptographically based authentication method that uses a FIPS-validated Advanced Encryption Standard (AES) cipher block algorithm to authenticate with the NTP server.

DISA Rule

SV-271105r1057958_rule

Vulnerability Number

V-271105

Group Title

SRG-APP-000570

Rule Version

DRAG-OT-002480

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure NTP Server.

Log in to the Dragos Platform CLI.

Execute the following command:
config ntp server add ["SERVER_NAME"]

Check Contents

Verify NTP Server.

Log in to the Dragos Platform CLI.

Execute the following command:
config show

If an NTP server is configured, the following will be in the output. If the following is not in the output, this is a finding. (Note: "servers" will be the configured server.)

"system": {
"ntp": {
"enabled": true,
"servers": [
"pool.ntp.org"
]
}
}

Vulnerability Number

V-271105

Documentable

False

Rule Version

DRAG-OT-002480

Severity Override Guidance

Verify NTP Server.

Log in to the Dragos Platform CLI.

Execute the following command:
config show

If an NTP server is configured, the following will be in the output. If the following is not in the output, this is a finding. (Note: "servers" will be the configured server.)

"system": {
"ntp": {
"enabled": true,
"servers": [
"pool.ntp.org"
]
}
}

Check Content Reference

M

Target Key

5675