Details

Enable NTP authentication.

Rationale:

Using authenticated NTP ensures the Cisco device only permits time updates from authorized NTP servers.

Impact:

Organizations should establish three Network Time Protocol (NTP) hosts to set consistent time across the enterprise. Enabling the ‘ntp authenticate’ command enforces authentication between NTP hosts.

Solution

Configure NTP authentication:

hostname(config)#ntp authenticate

Default Value:

NTP authentication is not enabled.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3156

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Cisco.

References

• 800-53|AU-8
• CSCv6|6.1
• CSCv7|6.1

Source

• Tenable.com/audits