The AAA Service must be configured to use at least two NTP servers to synchronize time.

From Authentication Authorization and Accounting Service Security Requirements Guide

SRG-APP-000516-AAA-000035_rule The AAA Service must be configured to use at least two NTP servers to synchronize time.

Vulnerability discussion

Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when conducting forensic analysis and investigating system events. Sources outside of the configured acceptable allowance (drift) may be inaccurate. Additionally, unnecessary synchronization may have an adverse impact on system performance and may indicate malicious activity. Synchronizing internal information system clocks provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network. NTP provides an efficient and scalable method for network devices to synchronize to an accurate time source.

Check content

Verify the AAA Service is configured to use at least two NTP servers to synchronize time. Both a primary and backup NTP server must be identified in the configuration. The AAA Service may leverage the capability of an operating system. If the AAA Service is not configured to use at least two separate NTP servers, this is a finding.

Fix text

Configure the AAA Service to use two separate NTP servers. Both a primary and backup NTP server must be identified in the configuration.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.