TMAegis
Plus de règles pour checkpoint

TMA-CHECKPOINT-2.3.1

Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

MoyenneNiveau 1Automatiséecheckpoint

Description

These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires NTP active on with a primary and a secondary server. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif
(?m)(?:^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+|^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+|^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+|^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$|^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+|^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$)

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

set ntp active on set ntp server primary <ntp1> version 3 set ntp server secondary <ntp2> version 3 save config # CIS guidance: Run the following command to enable the NTP and configure the Primary & Secondary NTP server. CLI: set ntp active on set ntp server primary ntpserver.time.com version 3 set ntp server primary 10.22.13.33 version 3 GUI: System Management > Time > Set Time and Date > Checked Set Time and Date automatically using Network Time Protocol (NTP) and configured the Primary NTP Server and Secondary NTP server

Propriétés

Systèmes d'exploitation
Tous
Étiquettes
checkpointtime
Référence
CIS Check Point Firewall Benchmark v1.1.0 - 2.3.1 Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell
tmaegis scan --target checkpoint