Authenticating NTP servers

You can configure the IBM QRadar Network Security appliance to authenticate NTPv3 servers so that their identity is confirmed.

About this task

Authenticate NTPv3 servers to comply with the DISA Network IPS/IDS Security Technical Implementation Guide.

Procedure

  1. Click Manage > System Settings > Date/Time.
  2. Select the NTP tab, and then perform one of the following actions.
    • Click New.
    • Select an existing NTP server, and then click Edit.
  3. Select Enable NTP to enable this server.
  4. Type the URL or IP address of the server.
  5. Select Enable Authentication.
  6. Select the Authentication Type.
    Note: You cannot use MD5 for NTP authentication on an appliance that is running in FIPS mode. Select SHA to enable NTP authentication on an appliance that is running in FIPS mode.
  7. Type the Key Identifier for the NTP server, and then click Save Configuration.
    Tip: You can enable or disable the NTP authentication settings on the NTP tab.