https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/time-synchronization-for-azure-vm-series/m-p/555650#M1973 <P>What is the best practice for keeping Azure VM-series NGFW time synchronized?</P> <P>Microsoft doesn't recommend using NTP, but rather having the OS sync with the host infrastructure directly. Is this supported by Palo Alto VM series, or are there plans for it? Or is the recommendation for each organization to either use a public NTP server / maintain an internal NTP server to keep the VM-series in sync? I haven't been able to find any documentation that explains how VM series does or doesn't use host time sync features.</P> <BLOCKQUOTE><HR /><SPAN>Some Azure Marketplace images with Linux are being changed to use chronyd as the time sync service, and chronyd is configured to synchronize against the Azure host rather than an external NTP time source. The Azure host time is usually the best time source to synchronize against, as it is maintained accurately and reliably, and is accessible without the variable network delays inherent in accessing an external NTP time source over the public internet.</SPAN><HR /></BLOCKQUOTE> <P><A href="https://learn.microsoft.com/en-us/azure/virtual-machines/linux/time-sync#configuration-options" target="_blank">Time sync for Linux VMs in Azure - Azure Virtual Machines | Microsoft Learn</A></P> Tue, 29 Aug 2023 09:05:23 GMT Toivo 2023-08-29T09:05:23Z https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/time-synchronization-for-azure-vm-series/m-p/555650#M1973 <P>What is the best practice for keeping Azure VM-series NGFW time synchronized?</P> <P>Microsoft doesn't recommend using NTP, but rather having the OS sync with the host infrastructure directly. Is this supported by Palo Alto VM series, or are there plans for it? Or is the recommendation for each organization to either use a public NTP server / maintain an internal NTP server to keep the VM-series in sync? I haven't been able to find any documentation that explains how VM series does or doesn't use host time sync features.</P> <BLOCKQUOTE><HR /><SPAN>Some Azure Marketplace images with Linux are being changed to use chronyd as the time sync service, and chronyd is configured to synchronize against the Azure host rather than an external NTP time source. The Azure host time is usually the best time source to synchronize against, as it is maintained accurately and reliably, and is accessible without the variable network delays inherent in accessing an external NTP time source over the public internet.</SPAN><HR /></BLOCKQUOTE> <P><A href="https://learn.microsoft.com/en-us/azure/virtual-machines/linux/time-sync#configuration-options" target="_blank">Time sync for Linux VMs in Azure - Azure Virtual Machines | Microsoft Learn</A></P> Tue, 29 Aug 2023 09:05:23 GMT https://live.paloaltonetworks.com/t5/vm-series-in-the-public-cloud/time-synchronization-for-azure-vm-series/m-p/555650#M1973 Toivo 2023-08-29T09:05:23Z