Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

How it is checked

Audit method: Configuration pattern

Pattern

(?m)(?:^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+|^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+|^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+|^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$|^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+|^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$)

How it is fixed

Fix method: Guidance or infrastructure patch

set ntp active on set ntp server primary <ntp1> version 3 set ntp server secondary <ntp2> version 3 save config # CIS guidance: Run the following command to enable the NTP and configure the Primary & Secondary NTP server. CLI: set ntp active on set ntp server primary ntpserver.time.com version 3 set ntp server primary 10.22.13.33 version 3 GUI: System Management > Time > Set Time and Date > Checked Set Time and Date automatically using Network Time Protocol (NTP) and configured the Primary NTP Server and Secondary NTP server

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

tmaegis scan --target checkpoint