FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
_martin_
Staff
Staff
Article Id 251224
Description

This article describes that In 2023 after 27 years, Mexico City decided to remove the daylight-time, this situation has brought confusion with the time shown in FortiGates configured to use the Fortiguard NTP service.

This issue is caused because 'daylight-saving time' is enabled by default in FortiGates.

Scope FortiGate.
Solution

To solve this issue:

 

  1. If the FortiGate is using an NTP server from FortiGuard, it is necessary to disable the 'daylight saving-time' parameter by CLI as follows:

 

Config system global

(global) set dst disable

(global)end

 

Picture1.png

  1. Go to CLI and force an update with the Fortiguard NTP server with the following command:

 

execute update-now

 

Note:

To see the debug messages during the update, it is possible to apply the following commands:

 

diagnose debug application update -1

diagnose debug enable

execute update-now

 

The above debug is so useful, so If there is a ticket with TAC support open, collect this debug and share it with TAC for analysis.

 

  1. After the update-now command, the system time will show the correct hour. To confirm the above,  go to CLI and execute the command:

 

execute time

 

This command will show the current time provided by FortiGuard NTP.

and when was the last Synchronization with the NTP.

 

3.png

 

If the Fortiguard NTP service is not used and the time is configured manually in the FortiGate, just changing the time manually in System Settings will be enough:

 

 
Picture2.png

By CLI:

 

execute date <yyyy-mm-dd>execute time <hh:mm:ss>