Check: RINP-DM-000049
Riverbed NetProfiler STIG:
RINP-DM-000049
(in versions v2 r1 through v1 r1)
Title
The Riverbed NetProfiler must be configured to record time stamps for audit records that meet a granularity of one second for a minimum degree of precision. (Cat II impact)
Discussion
Without sufficient granularity of time stamps, it is not possible to adequately determine the chronological order of records. Time stamps generated by the application include date and time. Granularity of time measurements refers to the degree of synchronization between information system clocks and reference clocks.
Check Content
Go to Administration >> General Settings. Under "Time Configuration", verify that redundant NTP servers have been configured. If NTP is not configured, this is a finding.
Fix Text
Go to Administration >> General Settings. Under "Time Configuration", enable and configure redundant NTP servers. This requirement is part of using the NTP protocol.
Additional Identifiers
Rule ID: SV-256087r997789_rule
Vulnerability ID: V-256087
Group Title: SRG-APP-000375-NDM-000300
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-001889 |
Record time stamps for audit records that meet organization-defined granularity of time measurement. |
| CCI-004923 |
Compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source. |
Controls
| Number | Title |
|---|---|
| AU-8 |
Time Stamps |