800-53|AU-8(1)

Title

SYNCHRONIZATION WITH AUTHORITATIVE TIME SOURCE

Description

The information system:

Supplemental

This control enhancement provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.

Reference Item Details

Category: AUDIT AND ACCOUNTABILITY

Parent Title: TIME STAMPS

Family: AUDIT AND ACCOUNTABILITY

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall v8.x L1 v4.2.0
2.1.1.2 Ensure systemd-timesyncd is configured - NTPUnixCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.1.0
2.1.1.2 Ensure systemd-timesyncd is configured - NTPUnixCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0
2.2 NTP Security Protection - c) NTP Auth-key encryptedZTE_ROSNGTenable ZTE ROSNG
2.2.1 Enable 'Set time and date automatically'UnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.2.1 Enable 'Set time and date automatically'UnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.2.1 Enable 'Set time and date automatically' - Set time and date automaticallyUnixCIS Apple macOS 10.13 L1 v1.1.0
2.2.1 Enable 'Set time and date automatically' - Set time and date automaticallyUnixCIS Apple macOS 10.12 L1 v1.2.0
2.2.1 Enable "Set time and date automatically"UnixCIS Apple OSX 10.9 L2 v1.3.0
2.2.1.2 Ensure ntp is configured - ntp:ntpUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.0
2.2.1.2 Ensure ntp is configured - ntp:ntpUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0
2.2.1.3 Ensure chrony is configured - remote serverUnixCIS Amazon Linux v2.1.0 L1
2.2.1.3 Ensure chrony is configured - serverUnixCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0
2.2.1.3 Ensure chrony is configured - serverUnixCIS SUSE Linux Enterprise Server 11 L1 v2.1.0
2.2.1.4 Ensure internal information system clocks are synchronizing - GPS.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.2.1.4 Ensure NTP 'maxpoll' is set - maxpoll is set.UnixCIS Amazon Linux 2 STIG v1.0.0 L3
2.3.1 Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server - ntp server primaryCheckPointCIS Check Point Firewall L1 v1.1.0
2.3.1.4 Set 'key' for each 'ntp server'CiscoCIS Cisco IOS 12 L2 v4.0.0
2.3.2 Set 'ip address' for 'ntp server'CiscoCIS Cisco IOS 12 L1 v4.0.0
3.084 - The system is configured to use an unauthorized time server. - 'NTPServer'WindowsDISA Windows Vista STIG v6r41
3.084 - The system is configured to use an unauthorized time server. - 'Type' - DomainWindowsDISA Windows Vista STIG v6r41
3.084 - The system is configured to use an unauthorized time server. - 'Type' - Non-domainWindowsDISA Windows Vista STIG v6r41
5.4 CIFS - 'timed.enable = on'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.proto = ntp'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.servers has been configured'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.window = 5m'NetAppTNS NetApp Data ONTAP 7G
13 - Network Time ProtocolNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
Adtran : Enable NTPAdtranTNS Adtran AOS Best Practice Audit
AIX7-00-001053 - AIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours - lssrcUnixDISA STIG AIX 7.x v2r5
AIX7-00-001053 - AIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours - maxpollUnixDISA STIG AIX 7.x v2r5
AIX7-00-001053 - AIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours - NTP ServerUnixDISA STIG AIX 7.x v2r5
AMLS-NM-000270 - The Arista Multilayer Switch must synchronize internal information system clocks to the authoritative time source when the time difference is greater than the organization-defined time period.AristaDISA STIG Arista MLS DCS-7000 Series NDM v1r3
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate