The application server must compare internal application server clocks at least every 24 hours with an authoritative time source.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-204792	SRG-APP-000371-AS-000077	SV-204792r508029_rule		Medium

Description
Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronization of system clocks is needed in order to correctly correlate the timing of events that occur across multiple systems. To meet this requirement, the organization will define an authoritative time source and have each system compare its internal clock at least every 24 hours.

Description

Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronization of system clocks is needed in order to correctly correlate the timing of events that occur across multiple systems. To meet this requirement, the organization will define an authoritative time source and have each system compare its internal clock at least every 24 hours.

STIG	Date
Application Server Security Requirements Guide	2021-12-10

Details

Check Text ( C-4912r283023_chk )
Review application server documentation and confirm that the application server compares internal application server clocks at least every 24 hours with an authoritative time source. If the application server does not compare internal application server clocks to an authoritative source or if the frequency is greater than every 24 hours, this is a finding.

Fix Text (F-4912r283024_fix)
Configure the application server to compare internal application server clocks at least every 24 hours with an authoritative time source.