Free DISA STIG and SRG Library | Vaulted

V-57437

The application server must synchronize internal application server clocks to an authoritative time source when the time difference is greater than the organization-defined time period.

Finding ID
SRG-APP-000372-AS-000212
Rule ID
SV-71709r2_rule
Severity
Cat II
CCE
(None)
Group Title
SRG-APP-000372-AS-000212
CCI
CCI-002046
Target Key
(None)
Documentable
No
Discussion

Determining the correct time a particular application event occurred on a system is critical when conducting forensic analysis and investigating system events. Synchronization of internal application server clocks is needed in order to correctly correlate the timing of events that occur across multiple systems. To meet this requirement, the organization will define an authoritative time source and have each system synchronize when the time difference is greater than a defined time period. The industry standard for the threshold is 1ms.

Fix Text

Configure the application server to reset internal information system clocks when the time difference is greater than a defined time period with the authoritative time source.

Check Content

Review application server documentation and configuration to determine if the application server is configured to reset internal information clocks when the difference is greater than a defined threshold with an authoritative time source. If the application server cannot synchronize internal application server clocks to the authoritative time source when the time difference is greater than the organization-defined time period, this is a finding.