STIGQter STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must compare internal information system clocks at least every 24 hours with an authoritative time server.

DISA Rule

SV-80737r1_rule

Vulnerability Number

V-66247

Group Title

SRG-APP-000371-NDM-000296

Rule Version

HFFS-ND-000098

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to compare internal information system clocks at least every 24 hours with an authoritative time server.

[HP] ntp enable
[HP] ntp unicast-server 16.110.135.123

Check Contents

Check the HP FlexFabric Switch configuration to determine if compares internal information system clocks at least every 24 hours with an authoritative time server.

[HP] display ntp status

Clock status: synchronized
Clock stratum: 4
System peer: 16.110.135.123
Local mode: client
Reference clock ID: 16.110.135.123
Leap indicator: 00
Clock jitter: 0.004227 s
Stability: 0.000 pps
Clock precision: 2^-19
Root delay: 96.75598 ms
Root dispersion: 149.76501 ms
Reference time: d916fabd.a5c6d326 Mon, Jun 1 2015 9:37:33.647

If this comparison does not occur at least every 24 hours, this is a finding.

Vulnerability Number

V-66247

Documentable

False

Rule Version

HFFS-ND-000098

Severity Override Guidance

Check the HP FlexFabric Switch configuration to determine if compares internal information system clocks at least every 24 hours with an authoritative time server.

[HP] display ntp status

Clock status: synchronized
Clock stratum: 4
System peer: 16.110.135.123
Local mode: client
Reference clock ID: 16.110.135.123
Leap indicator: 00
Clock jitter: 0.004227 s
Stability: 0.000 pps
Clock precision: 2^-19
Root delay: 96.75598 ms
Root dispersion: 149.76501 ms
Reference time: d916fabd.a5c6d326 Mon, Jun 1 2015 9:37:33.647

If this comparison does not occur at least every 24 hours, this is a finding.

Check Content Reference

M

Target Key

2971

Comments