Ensure correct system time is configured through NTP

中レベル 1自動fortiswitch

説明

You can either manually set the FortiSwitchOS system time, or configure the device to automatically keep its system time correct by synchronizing with a Network Time Protocol (NTP) server. These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires ntpsync enable in config system ntp; confirm synchronisation with 'diag sys ntp status'. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

チェック方法

監査方法: 設定パターン

パターン: (?m)^config system ntp\n(?:[ \t]+[^\n]*\n)*?[ \t]+set ntpsync enable[ \t]*$

修正方法

修正方法: ガイダンスまたは IaC パッチ

config system ntp set ntpsync enable config ntpserver edit 1 set server "pool.ntp.org" next edit 2 set server "1.1.1.1" next end end # CIS guidance: Only one NTP server allowed in the GUI. 'System' > 'Config' > 'Time'. Use CLI to configure additional NTP Servers. In this example, we'll assign pool.ntp.org as primary NTP server and 1.1.1.1 as secondary NTP server. config system ntp config ntpserver edit 1 set server pool.ntp.org next edit 2 set server 1.1.1.1 end end

プロパティ

オペレーティングシステム: すべて
タグ: fortiswitchtime
参照: CIS FortiSwitch Benchmark v1.0.0 - 1.5.4.1 Ensure correct system time is configured through NTP

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target fortiswitch