Ensure 'NTP authentication key' is configured correctly

높음레벨 1자동cisco-asa

설명

Sets the key used to authenticate NTP servers. When authentication is not enabled, attackers can disguise as NTP servers and broadcast wrong time and it will be difficult to correlate events upon an incident. In some other cases, attackers can perform NTP DDoS attacks such as NTP Amplification. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^ntp authentication-key \d+ \S+ \S

조치 방법

조치 방식: 가이드 또는 인프라 패치

! - Step 1: Run the following to set the authentication key ID <key_id> ntp trusted-key <key_id> - Step 2: Run the following to configure the authentication key <authentication_key> ntp authentication-key <key_id> md5 <authentication_key>

속성

운영 체제: 모두
태그: cisco-asanetworkntp
참고 자료: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.9.1.2 Ensure 'NTP authentication key' is configured correctly

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cisco-asa