Fortinet FortiSwitch
TMA-FORTISWITCH-1.5.4.1
Ensure correct system time is configured through NTP
Descripción
You can either manually set the FortiSwitchOS system time, or configure the device to automatically keep its system time correct by synchronizing with a Network Time Protocol (NTP) server. These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires ntpsync enable in config system ntp; confirm synchronisation with 'diag sys ntp status'. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.
Cómo se verifica
Método de auditoría: Patrón de configuración
- Patrón
(?m)^config system ntp\n(?:[ \t]+[^\n]*\n)*?[ \t]+set ntpsync enable[ \t]*$
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
config system ntp set ntpsync enable config ntpserver edit 1 set server "pool.ntp.org" next edit 2 set server "1.1.1.1" next end end # CIS guidance: Only one NTP server allowed in the GUI. 'System' > 'Config' > 'Time'. Use CLI to configure additional NTP Servers. In this example, we'll assign pool.ntp.org as primary NTP server and 1.1.1.1 as secondary NTP server. config system ntp config ntpserver edit 1 set server pool.ntp.org next edit 2 set server 1.1.1.1 end end
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- fortiswitchtime
- Referencia
- CIS FortiSwitch Benchmark v1.0.0 - 1.5.4.1 Ensure correct system time is configured through NTP
Verificar este host
Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.
tmaegis scan --target fortiswitch