Fortinet FortiSwitch
TMA-FORTISWITCH-1.5.4.1
Ensure correct system time is configured through NTP
Beschreibung
You can either manually set the FortiSwitchOS system time, or configure the device to automatically keep its system time correct by synchronizing with a Network Time Protocol (NTP) server. These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires ntpsync enable in config system ntp; confirm synchronisation with 'diag sys ntp status'. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)^config system ntp\n(?:[ \t]+[^\n]*\n)*?[ \t]+set ntpsync enable[ \t]*$
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
config system ntp set ntpsync enable config ntpserver edit 1 set server "pool.ntp.org" next edit 2 set server "1.1.1.1" next end end # CIS guidance: Only one NTP server allowed in the GUI. 'System' > 'Config' > 'Time'. Use CLI to configure additional NTP Servers. In this example, we'll assign pool.ntp.org as primary NTP server and 1.1.1.1 as secondary NTP server. config system ntp config ntpserver edit 1 set server pool.ntp.org next edit 2 set server 1.1.1.1 end end
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- fortiswitchtime
- Referenz
- CIS FortiSwitch Benchmark v1.0.0 - 1.5.4.1 Ensure correct system time is configured through NTP
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target fortiswitch