This is not the latest version of the STIG. This is provided for archival purposes. See the latest STIG.

The DNS server implementation must compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

STIG ID: SRG-APP-000925-DNS-000330  |  SRG: SRG-APP-000925 |  Severity: medium (CAT II)  |  CCI: CCI-004923 |  Vulnerability Id: V-263646

Vulnerability Discussion

Synchronization of internal system clocks with an authoritative source provides uniformity of time stamps for systems with multiple system clocks and systems connected over a network.

Check

Verify the DNS server implementation is configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

If the DNS server implementation is not configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source, this is a finding.

Fix

Configure the DNS server implementation to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.