Detections
Analytics
CISC-ND-001150 - The Cisco router must be configured to authenticate Network Time Protocol (NTP) sources using authentication with FIPS-compliant algorithms.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
If NTP is not authenticated, an attacker can introduce a rogue NTP server. This rogue server can then be used to send incorrect time information to network devices, which will make log timestamps inaccurate and affect scheduled actions. NTP authentication is used to prevent this tampering by authenticating the time source.Solution
Configure the Cisco router to authenticate NTP sources using authentication with FIPS-compliant algorithms as shown in the example below:RP/0/0/CPU0:router# configure
RP/0/0/CPU0:router(config)# ntp
RP/0/0/CPU0:router(config-ntp)# authentication-key 1 hmac-sha2 encrypted xxxxxx
RP/0/0/CPU0:router(config-ntp)# trusted-key 1
RP/0/0/CPU0:router(config-ntp)# authenticate
RP/0/0/CPU0:router(config-ntp)# server 198.51.100.1 key 1
RP/0/0/CPU0:router(config-ntp)# commit
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Cisco_IOS-XR_Router_Y26M01_STIG.zip
Item Details
Audit Name: DISA Cisco IOS XR Router NDM STIG v3r5
References: CAT|II, CCI|CCI-001967, Rule-ID|SV-216540r1156820_rule, STIG-ID|CISC-ND-001150, STIG-Legacy|SV-105605, STIG-Legacy|V-96467, Vuln-ID|V-216540
Plugin: Cisco
Control ID: 18348832cae25f0408dda5cdf1e6460c2c97c2f628326cbe051c564718f86d99