The NTP server is connected to a network other than the management network.

From Network Devices Security Technical Implementation Guide

Part of The NTP server is connected to a network other tha

SV-32243r1_rule The NTP server is connected to a network other than the management network.

Vulnerability discussion

NTP provides an efficient and scalable method for managed network elements to actively synchronize to an accurate time source. Insuring that there are always NTP servers available to provide time is critical. It is imperative that all single points of failure for the NTP infrastructure are eliminated. Knowing the correct time is not only crucial for proper network functioning but also for security. Compromising an NTP server opens the door to more sophisticated attacks that include NTP poisoning, replay attacks, and denial of service. To provide security through separation and isolation, the NTP server should only be connected to the management network. This enables the NTP server to provide time to the managed devices using a secured as well as a preferred path.

Check content

Review the layer 2 and layer 3 network topology to determine what network the NTP server is connected to. Verify that the server has been configured or assigned an IP address that belongs to the management network.

Fix text

Connect the NTP server only to the management network.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.