STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must authenticate Network Time Protocol sources using authentication that is cryptographically based.

DISA Rule

SV-273826r1110846_rule

Vulnerability Number

V-273826

Group Title

SRG-APP-000395-NDM-000347

Rule Version

RCKS-NDM-000740

Severity

CAT II

CCI(s)

• CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

10

Fix Recommendation

Configure NTP for authentication using SHA1:

SSH@ICX(config)# ntp
SSH@ICX(config-ntp)# disable authenticate md5
SSH@ICX(config-ntp)# authenticate
SSH@ICX(config-ntp)# authentication-key key-id 1 sha1 [password]

Check Contents

View NTP configuration:

SSH@ICX# show running-config | begin ntp

ntp
disable authenticate md5
authenticate
authentication-key key-id 1 sha1 2 $VWlkRGkt
server x.x.x.x key 1
server y.y.y.y key 1

If the NTP servers are not configured for authentication that is cryptographically based, this is a finding.

Vulnerability Number

V-273826

Documentable

False

Rule Version

RCKS-NDM-000740

Severity Override Guidance

View NTP configuration:

SSH@ICX# show running-config | begin ntp

ntp
disable authenticate md5
authenticate
authentication-key key-id 1 sha1 2 $VWlkRGkt
server x.x.x.x key 1
server y.y.y.y key 1

If the NTP servers are not configured for authentication that is cryptographically based, this is a finding.

Check Content Reference

M

Target Key

5695