STIGQter: STIG Summary: RUCKUS ICX NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX device must be configured to synchronize system clocks within and between systems or system components.

DISA Rule

SV-273850r1111029_rule

Vulnerability Number

V-273850

Group Title

SRG-APP-000920-NDM-000320

Rule Version

RCKS-NDM-001140

Severity

CAT II

CCI(s)

• CCI-004922 - Synchronize system clocks within and between systems or system components.

Weight

10

Fix Recommendation

Configure NTP clock synchronization.

Configure NTP:
device#configure terminal
device(config)# ntp
device(config-ntp)#server 216.239.35.8 (example IP)
device(config-ntp)# write memory

Configure NTP with authentication:
device#configure terminal
device(config)# ntp
device(config-ntp)#server 216.239.35.8 (example IP)
device(config-ntp)#authentication-key key-id 1234 sha1 testntpsession
device(config-ntp)# write memory

Check Contents

Verify the network device is configured to synchronize system clocks within and between systems or system components:

device#show ntp association
address Domain name Reference Clock st when poll Reach delay offset disp
~ 216.239.35.8 None 1 1 64 1 34.449 21474836 187.55
* synced, # selected, + candidate, - outlayer, x falseticker, ~ configured, **More characters in domain name

If the network device is not configured to synchronize system clocks within and between systems or system components, this is a finding.

Vulnerability Number

V-273850

Documentable

False

Rule Version

RCKS-NDM-001140

Severity Override Guidance

Verify the network device is configured to synchronize system clocks within and between systems or system components:

device#show ntp association
address Domain name Reference Clock st when poll Reach delay offset disp
~ 216.239.35.8 None 1 1 64 1 34.449 21474836 187.55
* synced, # selected, + candidate, - outlayer, x falseticker, ~ configured, **More characters in domain name

If the network device is not configured to synchronize system clocks within and between systems or system components, this is a finding.

Check Content Reference

M

Target Key

5695