STIGQter: STIG Summary: IBM MQ Appliance V9.0 AS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 05 Jun 2017:

The MQ Appliance messaging server must compare internal MQ Appliance messaging server clocks at least every 24 hours with an authoritative time source.

DISA Rule

SV-89419r1_rule

Vulnerability Number

V-74745

Group Title

SRG-APP-000371-AS-000077

Rule Version

MQMH-AS-000170

Severity

CAT III

CCI(s)

• CCI-001891 - The information system compares internal information system clocks on an organization-defined frequency with an organization-defined authoritative time source.

Weight

10

Fix Recommendation

Log on as a privileged user to the WebGUI.
Select the Network icon.
Interface NTP Service.

Ensure the box next to "Enable Administrative state" has a check mark.
Press the "Add" button to add multiple NTP servers.
Click the "Apply" button.

Add one or more additional NTP servers at least one of which is from a different geographic region.

Click "Save configuration".

Check Contents

Log on as a privileged user to the WebGUI.
Select Network icon.
Interface NTP Service.

Verify:
- NTP server destinations are configured.
- "Enable Administrative state" box is checked.

If "Enable Administrative state" is not checked or if no NTP servers are defined, this is a finding.

Vulnerability Number

V-74745

Documentable

False

Rule Version

MQMH-AS-000170

Severity Override Guidance

Log on as a privileged user to the WebGUI.
Select Network icon.
Interface NTP Service.

Verify:
- NTP server destinations are configured.
- "Enable Administrative state" box is checked.

If "Enable Administrative state" is not checked or if no NTP servers are defined, this is a finding.

Check Content Reference

M

Target Key

3239

Comments