The web server must compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

STIG ID: SRG-APP-000925-WSR-000330  |  SRG: SRG-APP-000925 |  Severity: medium (CAT II)  |  CCI: CCI-004923 |  Vulnerability Id: V-264359

Vulnerability Discussion

Synchronization of internal system clocks with an authoritative source provides uniformity of time stamps for systems with multiple system clocks and systems connected over a network.

Check

Verify the web server is configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.

If the web server is not configured to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source, this is a finding.

Fix

Configure the web server to compare the internal system clocks on an organization-defined frequency with organization-defined authoritative time source.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.