TMA-CHECKPOINT-2.3.1

Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

中レベル 1自動checkpoint

説明

These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires NTP active on with a primary and a secondary server. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

チェック方法

監査方法: 設定パターン

パターン: (?m)(?:^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+|^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+|^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+|^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$|^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+|^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$)

修正方法

修正方法: ガイダンスまたは IaC パッチ

set ntp active on set ntp server primary <ntp1> version 3 set ntp server secondary <ntp2> version 3 save config # CIS guidance: Run the following command to enable the NTP and configure the Primary & Secondary NTP server. CLI: set ntp active on set ntp server primary ntpserver.time.com version 3 set ntp server primary 10.22.13.33 version 3 GUI: System Management > Time > Set Time and Date > Checked Set Time and Date automatically using Network Time Protocol (NTP) and configured the Primary NTP Server and Secondary NTP server

プロパティ

オペレーティングシステム: すべて
タグ: checkpointtime
参照: CIS Check Point Firewall Benchmark v1.1.0 - 2.3.1 Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target checkpoint