STIGQter: STIG Summary: Symantec ProxySG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

Symantec ProxySG must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources.

DISA Rule

SV-104503r1_rule

Vulnerability Number

V-94673

Group Title

SRG-APP-000373-NDM-000298

Rule Version

SYMP-NM-000110

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001893 - The information system identifies a secondary authoritative time source that is located in a different geographic region than the primary authoritative time source.

Weight

10

Fix Recommendation

Configure the ProxySG is configured to use authoritative NTP servers.

1. Log on to the Web Management Console.
2. Click Configuration >> General >> Clock.
3. Click "NTP", click "New", click "Add" and enter each desired authoritative time server.
4. Click "Apply".

Check Contents

Verify the Symantec ProxySG is configured to use authoritative NTP servers.

1. Log on to the Web Management Console.
2. Click Configuration >> General >> Clock.
3. Click "NTP", and confirm that the desired authoritative time servers are present.

If Symantec ProxySG does not be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources, this is a finding.

Vulnerability Number

V-94673

Documentable

False

Rule Version

SYMP-NM-000110

Severity Override Guidance

Verify the Symantec ProxySG is configured to use authoritative NTP servers.

1. Log on to the Web Management Console.
2. Click Configuration >> General >> Clock.
3. Click "NTP", and confirm that the desired authoritative time servers are present.

If Symantec ProxySG does not be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources, this is a finding.

Check Content Reference

M

Target Key

3517

Comments