STIGQter: STIG Summary: A10 Networks ADC NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 15 Apr 2016:

The A10 Networks ADC must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.

DISA Rule

SV-82571r1_rule

Vulnerability Number

V-68081

Group Title

SRG-APP-000373-NDM-000298

Rule Version

AADC-NM-000101

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001893 - The information system identifies a secondary authoritative time source that is located in a different geographic region than the primary authoritative time source.

Weight

10

Fix Recommendation

Up to four NTP servers can be configured. The following commands set the NTP server and enable the Network Time Protocol:
ntp server [hostname | ipaddr]
ntp enable

Note: The primary and secondary time sources must be located in different geographic regions.

Check Contents

Review the device configuration.

The following command shows the configuration with an output modifier to display only NTP-related configuration:
show run | include ntp

Alternately, enter the command to display the configured NTP servers and whether or not NTP is enabled:
show ntp servers

If the output shows fewer than two configured NTP servers, this is a finding.

Ask the device administrator where the Primary NTP Server and Secondary NTP Server are located.

If they are not in different geographic regions, this is a finding.

Vulnerability Number

V-68081

Documentable

False

Rule Version

AADC-NM-000101

Severity Override Guidance

Review the device configuration.

The following command shows the configuration with an output modifier to display only NTP-related configuration:
show run | include ntp

Alternately, enter the command to display the configured NTP servers and whether or not NTP is enabled:
show ntp servers

If the output shows fewer than two configured NTP servers, this is a finding.

Ask the device administrator where the Primary NTP Server and Secondary NTP Server are located.

If they are not in different geographic regions, this is a finding.

Check Content Reference

M

Target Key

2915

Comments