Free DISA STIG and SRG Library | Vaulted

V-57435

The application server must compare internal application server clocks at least every 24 hours with an authoritative time source.

Finding ID
SRG-APP-000371-AS-000077
Rule ID
SV-71707r2_rule
Severity
Cat II
CCE
(None)
Group Title
SRG-APP-000371-AS-000077
CCI
CCI-001891
Target Key
(None)
Documentable
No
Discussion

Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronization of system clocks is needed in order to correctly correlate the timing of events that occur across multiple systems. To meet this requirement, the organization will define an authoritative time source and have each system compare its internal clock at least every 24 hours.

Fix Text

Configure the application server to compare internal application server clocks at least every 24 hours with an authoritative time source.

Check Content

Review application server documentation and confirm that the application server compares internal application server clocks at least every 24 hours with an authoritative time source. If the application server does not compare internal application server clocks to an authoritative source or if the frequency is greater than every 24 hours, this is a finding.