Accurate time synchronization is essential for the reliable operation of a Palo Alto Networks firewall. Network Time Protocol (NTP) ensures correct log timestamps, certificate validation, High Availability (HA) synchronization, Panorama connectivity, and cloud service communication.
What is NTP?
Network Time Protocol (NTP) is a networking protocol used to synchronize the clocks of computers and network devices with a trusted time source.
Palo Alto Networks firewalls rely on accurate time for:
- Security log timestamps
- Certificate validation
- Dynamic Updates
- Scheduled configuration backups
Without proper time synchronization, logs may appear out of order, certificates may become invalid, and cloud services may fail.
Configure NTP Using the Web Interface
Step 1: Navigate to Services
Go to:
Device → Setup → Services
Click Edit.
Step 2: Configure the NTP Servers
Open the NTP tab.
Configure:
Primary NTP Server
pool.ntp.org
Secondary NTP Server
time.google.com
If your organization uses internal NTP servers, enter those instead.
Step 3: Save the Configuration
Click:
OK
Step 4: Commit the Changes
Click:
Commit
Configure NTP Using the CLI
Enter configuration mode:
configure
Configure the primary server:
set deviceconfig system ntp-servers primary-ntp-server ntp-server-address pool.ntp.org
Configure the secondary server:
set deviceconfig system ntp-servers secondary-ntp-server ntp-server-address time.google.com
Commit the changes:
commit
Exit configuration mode:
exit
Verify the Configuration
Check the configured NTP servers:
show ntp
Verify the firewall clock:
show clock
Leave a Reply