STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.

DISA Rule

SV-80741r1_rule

Vulnerability Number

V-66251

Group Title

SRG-APP-000373-NDM-000298

Rule Version

HFFS-ND-000100

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001893 - The information system identifies a secondary authoritative time source that is located in a different geographic region than the primary authoritative time source.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources:

[HP] ntp service enable
[HP] ntp service unicast-server 16.110.135.123
[HP] ntp service unicast-server 16.110.135.124

Check Contents

Determine if the HP FlexFabric Switch is configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.

[HP] display ntp status

Clock status: synchronized
Clock stratum: 4
System peer: 16.110.135.123
Local mode: client
Reference clock ID: 16.110.135.123
Leap indicator: 00
Clock jitter: 0.004227 s
Stability: 0.000 pps
Clock precision: 2^-19
Root delay: 96.75598 ms
Root dispersion: 149.76501 ms
Reference time: d916fabd.a5c6d326 Mon, Jun 1 2015 9:37:33.647

If the HP FlexFabric Switch is not configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources, this is a finding.

Vulnerability Number

V-66251

Documentable

False

Rule Version

HFFS-ND-000100

Severity Override Guidance

Determine if the HP FlexFabric Switch is configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.

[HP] display ntp status

Clock status: synchronized
Clock stratum: 4
System peer: 16.110.135.123
Local mode: client
Reference clock ID: 16.110.135.123
Leap indicator: 00
Clock jitter: 0.004227 s
Stability: 0.000 pps
Clock precision: 2^-19
Root delay: 96.75598 ms
Root dispersion: 149.76501 ms
Reference time: d916fabd.a5c6d326 Mon, Jun 1 2015 9:37:33.647

If the HP FlexFabric Switch is not configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources, this is a finding.

Check Content Reference

M

Target Key

2971

Comments