Capacity
CCI-001890
Record time stamps for audit records that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or that include the local time offset as part of the time stamp.
1
Rule
Severity: High
Enable audit Service
4
Rule
Severity: High
Ensure real-time clock is set to UTC
1
Rule
Severity: Medium
The A10 Networks ADC must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
AAA Services must be configured to use or map to Coordinated Universal Time (UTC) to record time stamps for audit records.
2
Rule
Severity: Medium
The Apache web server must generate log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) with a minimum granularity of one second.
1
Rule
Severity: Medium
The Arista Multilayer Switch must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The application server must record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The Arista network device must be configured to synchronize internal system clocks using redundant authenticated time sources.
2
Rule
Severity: Medium
The application must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Low
The CA API Gateway must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Low
Upon receipt of the log record from hosts and devices, the Central Log Server must be configured to record time stamps of the time of receipt that can be mapped to Coordinated Universal Time (UTC).
1
Rule
Severity: Medium
The DBN-6300 must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
1
Rule
Severity: Medium
The FortiGate device must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Medium
CounterACT must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
2
Rule
Severity: Medium
Forescout must be configured to use Coordinated Universal Time (UTC).
1
Rule
Severity: Medium
The HP FlexFabric Switch must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Low
The storage system must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Medium
The DataPower Gateway must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The Juniper router must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The Juniper SRX Services Gateway must record time stamps for log records using Coordinated Universal Time (UTC).
1
Rule
Severity: Medium
SQL Server must produce time stamps that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
2
Rule
Severity: Medium
ONTAP must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The network device must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The Riverbed NetProfiler must be configured to record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
2
Rule
Severity: Medium
Rancher MCM must generate audit records for all DoD-defined auditable events within all components in the platform.
1
Rule
Severity: Medium
Riverbed Optimization System (RiOS) must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
2
Rule
Severity: Medium
The TippingPoint SMS must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The UEM server must be configured to record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Medium
The NSX-T Manager must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
2
Rule
Severity: Medium
The Apache web server must generate log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) which are stamped at a minimum granularity of one second.
1
Rule
Severity: Medium
The macOS system must initiate session audits at system startup, using internal clocks with time stamps for audit records that meet a minimum granularity of one second and can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT), in order to generate audit records containing information to establish what type of events occurred, the identity of any individual or process associated with the event, including individual identities of group account users, establish where the events occurred, source of the event, and outcome of the events including all account enabling actions, full-text recording of privileged commands, and information about the use of encryption for access wireless access to and from the system.
3
Rule
Severity: Medium
The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.
3
Rule
Severity: Medium
The macOS system must enable security auditing.
3
Rule
Severity: Low
The Ubuntu operating system must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
PostgreSQL must record time stamps, in audit records and application data that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
2
Rule
Severity: Medium
The Cisco ASA must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.
4
Rule
Severity: Medium
The Cisco router must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.
4
Rule
Severity: Medium
The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.
2
Rule
Severity: Medium
The Cisco router must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The Cisco ISE must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
2
Rule
Severity: Medium
The Cisco switch must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
All audit records must use UTC or GMT time stamps.
2
Rule
Severity: Medium
The EDB Postgres Advanced Server must record time stamps in audit records and application data that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
2
Rule
Severity: Medium
The DBMS must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
2
Rule
Severity: Low
The operating system must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The HPE 3PAR OS must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
AIX must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The ICS must be configured to record time stamps for audit records that can be mapped to Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The Juniper EX switch must be configured to record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
MariaDB must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
2
Rule
Severity: Medium
SQL Server must record time stamps in audit records and application data that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
1
Rule
Severity: Medium
PostgreSQL must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
1
Rule
Severity: Medium
OL 8 must compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).
2
Rule
Severity: Medium
The Palo Alto Networks security platform must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
Redis Enterprise DBMS must record time stamps, in audit records and application data, that can be mapped to Coordinated Universal Time (UTC, formerly GMT).
2
Rule
Severity: Medium
Rancher RKE2 components must be configured in accordance with the security configuration settings based on DOD security configuration or implementation guidance, including SRGs, STIGs, NSA configuration guides, CTOs, and DTMs.
2
Rule
Severity: Medium
RHEL 9 must securely compare internal information system clocks at least every 24 hours.
4
Rule
Severity: Low
The SUSE operating system must be configured to use Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
2
Rule
Severity: Medium
The VMM must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Medium
VAMI must produce log records containing sufficient information to establish what type of events occurred.
1
Rule
Severity: Medium
Performance Charts must record user access in a format that enables monitoring of remote access.
1
Rule
Severity: Medium
ESX Agent Manager must record user access in a format that enables monitoring of remote access.
1
Rule
Severity: Medium
Lookup Service must record user access in a format that enables monitoring of remote access.
1
Rule
Severity: Medium
VMware Postgres must use Coordinated Universal Time (UTC) for log timestamps.
1
Rule
Severity: Medium
The Security Token Service must record user access in a format that enables monitoring of remote access.
1
Rule
Severity: Medium
vSphere UI must record user access in a format that enables monitoring of remote access.
3
Rule
Severity: Medium
The vCenter PostgreSQL service must use Coordinated Universal Time (UTC) for log timestamps.
3
Rule
Severity: Medium
The vCenter VAMI service must produce log records containing sufficient information to establish what type of events occurred.
2
Rule
Severity: Medium
The web server must generate log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
1
Rule
Severity: Low
Ubuntu 22.04 LTS must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
1
Rule
Severity: Medium
PostgreSQL must record time stamps in audit records and application data that can be mapped to Coordinated Universal Time (UTC), formerly Greenwich Mean Time (GMT).
1
Rule
Severity: Medium
The F5 BIG-IP appliance must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
1
Rule
Severity: Medium
OL 8 must compare internal information system clocks at least every 24 hours with a server synchronized to an authoritative time source, such as the United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).
1
Rule
Severity: Medium
SLEM 5 must have the auditing package installed.
1
Rule
Severity: Medium
SLEM 5 must generate audit records for all uses of privileged functions.
1
Rule
Severity: Medium
TOSS must, for networked systems, compare internal information system clocks at least every 24 hours with a server which is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS).
1
Rule
Severity: Medium
The NSX Manager must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
Patternfly
PatternFly elements
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Modules