Authenticated NTP, what do you use?

[OtakarKlier]

Hello Community,

While I already have googled and found some solutions, I would like to get input from you to see what you have used and works well. 

In a windows environment, what do you use to point your PAN's NTP configuration to an authenticated server? I know domain controllers use Kerberos with other windows systems, but not 3rd party devices.

Any and all input is appreciated.

Cheers!

[SCantwell_IM]

Hi @OtakarKlier 

I have not had any true luck in authenticated NTP servers.  I guess you are correct that internally, you can use Kerberos, but as for public servers, nothing has worked in the 10 years I have worked with PANW (unless, of course, I control the NTP server on the internet, which is possible. :P)

[TomYoung]

Hi all,

Cisco routers and switches work fine as authenticated NTP servers.  I prefer to have a few devices get time from the Internet, and then the rest of the internal devices get time from them.

Thanks,

Tom

[OtakarKlier]

Hello @TomYoung ,

Yeah we use internal domain controllers for centralized time. I'll keep digging as I dont want to use the Cisco's for this purpose at this time.

Cheers!