Detections
Analytics

800-53|AU-8(1)

Title

SYNCHRONIZATION WITH AUTHORITATIVE TIME SOURCE

Description

The information system:

Supplemental

This control enhancement provides uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.

Reference Item Details

Category: AUDIT AND ACCOUNTABILITY

Parent Title: TIME STAMPS

Family: AUDIT AND ACCOUNTABILITY

Baseline Impact: MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3.5 Ensure 'Maximum tolerance for computer clock synchronization' is set to '5 or fewer minutes' (STIG DC only)WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 STIG DC
1.3.5 Ensure 'Maximum tolerance for computer clock synchronization' is set to '5 or fewer minutes' (STIG DC only)WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DC
1.3.5 Ensure 'Maximum tolerance for computer clock synchronization' is set to '5 or fewer minutes' (STIG DC only)WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 STIG DC
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.6.2 Ensure redundant NTP servers are configured appropriatelyPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.9.1.3 Ensure 'trusted NTP server' existsCiscoCIS Cisco Firewall v8.x L1 v4.2.0
2.2 NTP Security Protection - c) NTP Auth-key encryptedZTE_ROSNGTenable ZTE ROSNG
2.2.1 Enable 'Set time and date automatically'UnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.2.1 Enable 'Set time and date automatically'UnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.2.1 Enable 'Set time and date automatically' - Set time and date automaticallyUnixCIS Apple macOS 10.13 L1 v1.1.0
2.2.1 Enable 'Set time and date automatically' - Set time and date automaticallyUnixCIS Apple macOS 10.12 L1 v1.2.0
2.2.1 Enable "Set time and date automatically"UnixCIS Apple OSX 10.9 L2 v1.3.0
2.2.1.3 Ensure chrony is configured - remote serverUnixCIS Amazon Linux v2.1.0 L1
2.2.1.4 Ensure internal information system clocks are synchronizing - GPS.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.3.1 Ensure NTP is enabled and IP address is set for Primary and Secondary NTP server - ntp server primaryCheckPointCIS Check Point Firewall L1 v1.1.0
2.3.1.4 Set 'key' for each 'ntp server'CiscoCIS Cisco IOS 12 L2 v4.0.0
2.3.2 Set 'ip address' for 'ntp server'CiscoCIS Cisco IOS 12 L1 v4.0.0
3.084 - The system is configured to use an unauthorized time server. - 'NTPServer'WindowsDISA Windows Vista STIG v6r41
3.084 - The system is configured to use an unauthorized time server. - 'Type' - DomainWindowsDISA Windows Vista STIG v6r41
3.084 - The system is configured to use an unauthorized time server. - 'Type' - Non-domainWindowsDISA Windows Vista STIG v6r41
5.4 CIFS - 'timed.enable = on'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.proto = ntp'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.servers has been configured'NetAppTNS NetApp Data ONTAP 7G
5.4 CIFS - 'timed.window = 5m'NetAppTNS NetApp Data ONTAP 7G
13 - Network Time ProtocolNetapp_APINetApp Security Hardening Guide for ONTAP 9 v1.7.0
AIX7-00-001053 - AIX must provide time synchronization applications that can synchronize the system clock to external time sources at least every 24 hours.UnixDISA STIG AIX 7.x v3r1
APPL-14-000014 - The macOS system must enforce time synchronization.UnixDISA Apple macOS 14 (Sonoma) STIG v2r2
APPL-14-000170 - The macOS system must be configured to use an authorized time server.UnixDISA Apple macOS 14 (Sonoma) STIG v2r2
APPL-14-000180 - The macOS system must enable time synchronization daemon.UnixDISA Apple macOS 14 (Sonoma) STIG v2r2
APPL-15-000014 - The macOS system must enforce time synchronization.UnixDISA Apple macOS 15 (Sequoia) STIG v1r1
APPL-15-000170 - The macOS system must be configured to use an authorized time server.UnixDISA Apple macOS 15 (Sequoia) STIG v1r1
APPL-15-000180 - The macOS system must enable the time synchronization daemon.UnixDISA Apple macOS 15 (Sequoia) STIG v1r1
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure macOS to Use an Authorized Time ServerUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable macOS Time Synchronization Daemon (timed)UnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enable Time Synchronization DaemonUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate