NET0812 - Two NTP servers are not used to synchronize time - 'ntp multicast client MULTICAST_IP_1'

Information

The network element must use two or more NTP servers to synchronize time.

Without synchronized time, accurately correlating information between devices becomes difficult, if not impossible. If you cannot successfully compare logs between each of your routers, switches, and firewalls, it will be very difficult to determine the exact events that resulted in a network breach incident. NTP provides an efficient and scalable method for network elements to synchronize to an accurate time source.

NOTE: An alternative to querying an NTP server for time is to receive NTP updates via server that is broadcasting or multicasting the time update messages. If you already have two NTP servers defined this check in not necessary.
NOTE: Change 'MULTICAST_IP_1' to The IP address of the first NTP multicast address listed for your organization.

Solution

Configure the device to use two separate NTP servers.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_L2_Switch_V8R27_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, Rule-ID|SV-41497r1_rule, STIG-ID|NET0812, Vuln-ID|V-23747

Plugin: Cisco

Control ID: 1b55e24681b796577e8652582cb04f1ee81af85a2b869ae33468e09bc0b579f6