The DNS server implementation must compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

STIG ID: SRG-APP-000925-DNS-000330  |  SRG: SRG-APP-000925 |  Severity: medium (CAT II)  |  CCI: CCI-004923 |  Vulnerability Id: V-263646

Vulnerability Discussion

Synchronization of internal system clocks with an authoritative source provides uniformity of time stamps for systems with multiple system clocks and systems connected over a network.

Check

Verify the DNS server implementation is configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

If the DNS server implementation is not configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source, this is a finding.

Fix

Configure the DNS server implementation to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.