CounterACT must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC).
An XCCDF Rule
Description
<VulnDiscussion>If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by the application include date and time. Time is expressed in UTC.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-90927r1_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Configure CounterACT to record time stamps for audit records that can be mapped to UTC.
Note: Updating time preferences will force CounterACT into maintenance mode. Use a scheduled outage for planned maintenance and stop CounterACT service prior to adjusting time settings.
1. After logon, type the following command at the prompt using the IP address of the required NTP server:
fstool ntp <ip address>