topic Re: Authenticated NTP, what do you use? in General Topics

Authenticated NTP, what do you use?

OtakarKlier — Fri, 12 Aug 2022 17:27:42 GMT

Hello Community,

While I already have googled and found some solutions, I would like to get input from you to see what you have used and works well.

In a windows environment, what do you use to point your PAN's NTP configuration to an authenticated server? I know domain controllers use Kerberos with other windows systems, but not 3rd party devices.

Any and all input is appreciated.

Cheers!

Re: Authenticated NTP, what do you use?

S.Cantwell — Mon, 15 Aug 2022 15:30:55 GMT

Hi @OtakarKlier

I have not had any true luck in authenticated NTP servers. I guess you are correct that internally, you can use Kerberos, but as for public servers, nothing has worked in the 10 years I have worked with PANW (unless, of course, I control the NTP server on the internet, which is possible. :P)

Re: Authenticated NTP, what do you use?

TomYoung — Mon, 15 Aug 2022 23:57:20 GMT

Hi all,

Cisco routers and switches work fine as authenticated NTP servers. I prefer to have a few devices get time from the Internet, and then the rest of the internal devices get time from them.

Thanks,

Tom

Re: Authenticated NTP, what do you use?

OtakarKlier — Fri, 19 Aug 2022 15:59:32 GMT

Hello @TomYoung ,

Yeah we use internal domain controllers for centralized time. I'll keep digging as I dont want to use the Cisco's for this purpose at this time.

Cheers!