TMA-CHECKPOINT-2.3.1

Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

보통레벨 1자동checkpoint

설명

These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires NTP active on with a primary and a secondary server. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)(?:^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+|^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+|^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server secondary \S+|^set ntp server primary \S+(?s:.*?)^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$|^set ntp server secondary \S+(?s:.*?)^set ntp active on[ \t]*$(?s:.*?)^set ntp server primary \S+|^set ntp server secondary \S+(?s:.*?)^set ntp server primary \S+(?s:.*?)^set ntp active on[ \t]*$)

조치 방법

조치 방식: 가이드 또는 인프라 패치

set ntp active on set ntp server primary <ntp1> version 3 set ntp server secondary <ntp2> version 3 save config # CIS guidance: Run the following command to enable the NTP and configure the Primary & Secondary NTP server. CLI: set ntp active on set ntp server primary ntpserver.time.com version 3 set ntp server primary 10.22.13.33 version 3 GUI: System Management > Time > Set Time and Date > Checked Set Time and Date automatically using Network Time Protocol (NTP) and configured the Primary NTP Server and Secondary NTP server

속성

운영 체제: 모두
태그: checkpointtime
참고 자료: CIS Check Point Firewall Benchmark v1.1.0 - 2.3.1 Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target checkpoint