08-29-2023 02:05 AM
What is the best practice for keeping Azure VM-series NGFW time synchronized?
Microsoft doesn't recommend using NTP, but rather having the OS sync with the host infrastructure directly. Is this supported by Palo Alto VM series, or are there plans for it? Or is the recommendation for each organization to either use a public NTP server / maintain an internal NTP server to keep the VM-series in sync? I haven't been able to find any documentation that explains how VM series does or doesn't use host time sync features.
Some Azure Marketplace images with Linux are being changed to use chronyd as the time sync service, and chronyd is configured to synchronize against the Azure host rather than an external NTP time source. The Azure host time is usually the best time source to synchronize against, as it is maintained accurately and reliably, and is accessible without the variable network delays inherent in accessing an external NTP time source over the public internet.
Time sync for Linux VMs in Azure - Azure Virtual Machines | Microsoft Learn
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
