NTP server

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

NTP server

L2 Linker

hi guys,

 i am lookin to config PA 5220 as a NTP server for my lan network, this whole network is completely off of internet.

is it possible to config if yes what are the steps.

I tried keeping the Primary and secondary NTP fields blank, but if want to broadcast the PA local time on my LAn network, am unable to find further config settings.

Does anyone knows how to config PA as NTP server withoout Internet connectivity??

1 accepted solution

Accepted Solutions

L4 Transporter

Hi @zaidshaikh,

 

Palo Altos cannot propagate NTP, so there is no NTP-proxy like DNS-proxy or so on.

If the network is air-gapped you should consider to get a NTP appliance, which will sync your whole network.

Having non-synched components is a nightmare for troubleshooting and forensics, so I would recommend getting a local NTP server (cluster)

Best Regards
Chacko

View solution in original post

2 REPLIES 2

L4 Transporter

Hi @zaidshaikh,

 

Palo Altos cannot propagate NTP, so there is no NTP-proxy like DNS-proxy or so on.

If the network is air-gapped you should consider to get a NTP appliance, which will sync your whole network.

Having non-synched components is a nightmare for troubleshooting and forensics, so I would recommend getting a local NTP server (cluster)

Best Regards
Chacko

Thanks Checkoz,

 

We were using WIN server as a NTP server which was mapped to out DController and this WIN server was also configured a client of DC, due to which it experiences issues when the DC is going throu some problems.

By the way, meantime was lookin at our FGT FW, it can act as well as propagate NTP.

 

Anyways, thanks checko

  • 1 accepted solution
  • 4141 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!