TMA-FORTISWITCH-1.5.4.1
Ensure correct system time is configured through NTP
Opis
You can either manually set the FortiSwitchOS system time, or configure the device to automatically keep its system time correct by synchronizing with a Network Time Protocol (NTP) server. These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server. PASS requires ntpsync enable in config system ntp; confirm synchronisation with 'diag sys ntp status'. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)^config system ntp\n(?:[ \t]+[^\n]*\n)*?[ \t]+set ntpsync enable[ \t]*$
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
config system ntp set ntpsync enable config ntpserver edit 1 set server "pool.ntp.org" next edit 2 set server "1.1.1.1" next end end # CIS guidance: Only one NTP server allowed in the GUI. 'System' > 'Config' > 'Time'. Use CLI to configure additional NTP Servers. In this example, we'll assign pool.ntp.org as primary NTP server and 1.1.1.1 as secondary NTP server. config system ntp config ntpserver edit 1 set server pool.ntp.org next edit 2 set server 1.1.1.1 end end
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- fortiswitchtime
- Referenca
- CIS FortiSwitch Benchmark v1.0.0 - 1.5.4.1 Ensure correct system time is configured through NTP
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target fortiswitch