Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
GEN000244-ESXI5-000163 | GEN000244-ESXI5-000163 | GEN000244-ESXI5-000163_rule | Low |
Description |
---|
A synchronized system clock is critical for the enforcement of time-based policies and the correlation of logs and audit records with other systems. The network architecture should provide multiple time servers within an enclave providing local service to the enclave and synchronize with time sources outside of the enclave. |
STIG | Date |
---|---|
VMware ESXi v5 Security Technical Implementation Guide | 2013-01-15 |
Check Text ( C-GEN000244-ESXI5-000163_chk ) |
---|
From the vSphere Client: Select the host and click Configuration >> Time Configuration". Select the properties link and chose 'Options'. Select NTP Settings to view configured NTP servers. If NTP is not configured to use NTP server(s) local to the enclave, this is a finding. |
Fix Text (F-GEN000244-ESXI5-000163_fix) |
---|
From the vSphere Client: Select the host and click Configuration >> Time Configuration". Select the properties link and chose 'Options'. From the General tab start the NTP service and select "Start and stop with host". From the NTP Settings tab click the 'Add' button to add NTP server(s) local to the enclave. |