The application server must synchronize internal application server clocks to an authoritative time source when the time difference is greater than the organization-defined time period.

From Application Server Security Requirements Guide

Associated with: CCI-002046

SV-71709r2_rule The application server must synchronize internal application server clocks to an authoritative time source when the time difference is greater than the organization-defined time period.

Vulnerability discussion

Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events.Synchronization of internal application server clocks is needed in order to correctly correlate the timing of events that occur across multiple systems. To meet this requirement, the organization will define an authoritative time source and have each system synchronize when the time difference is greater than a defined time period. The industry standard for the threshold is 1ms.

Check content

Review application server documentation and configuration to determine if the application server is configured to reset internal information clocks when the difference is greater than a defined threshold with an authoritative time source. If the application server cannot synchronize internal application server clocks to the authoritative time source when the time difference is greater than the organization-defined time period, this is a finding.

Fix text

Configure the application server to reset internal information system clocks when the time difference is greater than a defined time period with the authoritative time source.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.