Ensure at least 3 NTP servers and an NTP symmetric key are configured

FaibleNiveau 2Automatiséeflasharray

Description

The network time protocol (NTP) allows time to be synchronized between devices on a network. Everpure recommends the following: ; Configure at least 3 NTP servers. ; Configure an NTP symmetric key. Note: The NTP symmetric key cannot be configured through the GUI. This can only be done through the CLI. Passes when at least three comma-separated NTP servers and an NTP symmetric key are configured. The audit is a config_regex check against a text export of the Purity//FA CLI, supplied with --device-config. Capture it over SSH with the --nvp (name=value) output option, for example: ssh pureuser@<array> "purearray list --ntp --nvp" > flasharray.txt (one file may hold the output of all commands used by this pack).

Méthode de vérification

Méthode d'audit: Motif de configuration

Motif: (?is)(?:ntp[ _-]?servers?[ \t]*[=:]?[ \t]*[^\s,]+[ \t]*,[ \t]*[^\s,]+[ \t]*,[ \t]*[^\s,]+.*ntp[ _-]?symmetric[ _-]?key[ \t]*[=:]?[ \t]*[^\s-]|ntp[ _-]?symmetric[ _-]?key[ \t]*[=:]?[ \t]*[^\s-].*ntp[ _-]?servers?[ \t]*[=:]?[ \t]*[^\s,]+[ \t]*,[ \t]*[^\s,]+[ \t]*,[ \t]*[^\s,]+)

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To align with the security recommendations, configure at least three NTP servers and secure the communication using an NTP symmetric key. From the GUI: ; Navigate to Settings > System. ; In the Time panel, locate the NTP Servers section. ; In the New NTP Server(s) text box, type the hostname or IP address of your NTP servers (you can enter multiple servers as comma-separated values). ; Click the Add button. Ensure you have added at least three servers. From the CLI: ; Configure at least three NTP servers: Specify the servers using the purearray setattr command. ; Command Syntax: purearray setattr --ntpserver <SERVER1>,<SERVER2>,<SERVER3>

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: flasharraystorageencryption
Référence: CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 2.8 Ensure at least 3 NTP servers and an NTP symmetric key are configured

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target flasharray --level 2