topic Re: NTP server in General Topics

NTP server

zaidshaikh — Tue, 28 Jul 2020 08:56:46 GMT

hi guys,

i am lookin to config PA 5220 as a NTP server for my lan network, this whole network is completely off of internet.

is it possible to config if yes what are the steps.

I tried keeping the Primary and secondary NTP fields blank, but if want to broadcast the PA local time on my LAn network, am unable to find further config settings.

Does anyone knows how to config PA as NTP server withoout Internet connectivity??

Re: NTP server

Chacko42 — Tue, 28 Jul 2020 09:36:11 GMT

Hi @zaidshaikh,

Palo Altos cannot propagate NTP, so there is no NTP-proxy like DNS-proxy or so on.

If the network is air-gapped you should consider to get a NTP appliance, which will sync your whole network.

Having non-synched components is a nightmare for troubleshooting and forensics, so I would recommend getting a local NTP server (cluster)

Re: NTP server

zaidshaikh — Tue, 28 Jul 2020 09:56:42 GMT

Thanks Checkoz,

We were using WIN server as a NTP server which was mapped to out DController and this WIN server was also configured a client of DC, due to which it experiences issues when the DC is going throu some problems.

By the way, meantime was lookin at our FGT FW, it can act as well as propagate NTP.

Anyways, thanks checko