TMA-OPNSENSE-5.1.1
Ensure time zone is properly configured
Description
Sets the local time zone information so that the device's time display is more accurate for viewers. The device's time setting needs to be accurate for two reasons in particular. The first is that digital certificates use this time to compare the validity period they specify in their Valid From and Valid To fields to a range of times. The second justification is the need for accurate time stamps when logging data. When doing packet captures, delivering messages to a Syslog server, SNMP monitoring stations, or other tasks, timestamps are only meaningful if you can be certain of their accuracy.
How it is checked
Audit method: Configuration pattern
- Pattern
<snmpd>(?:[^<]|<[^/<]|</[^s<]|</s[^n<]|</sn[^m<]|</snm[^p<]|</snmp[^d<]|</snmpd[^><])*?<trapserver>[^<\s][^<]*</trapserver>
How it is fixed
Fix method: Guidance or infrastructure patch
In the GUI: - Navigate to Services > Network Time > General - Add NTP servers under 'Time Servers' - Select one as preferred by checking 'Prefer' - Click 'Save'
Properties
- Operating systems
- Any
- Tags
- opnsense
- Reference
- CIS OPNsense Benchmark v1.0.0 - 5.1.1 Ensure time zone is properly configured
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target opnsense