Troubleshooting Tip : FortiGate with manual time s...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 199843

Description

This articles describes how FortiGate with manual time setting is not responding to NTP queries even though server-mode is enabled.

FortiGate with below setting not responding to inbound NTP queries on interface 'internal' -

# config system ntp

set ntp-sync disable

set server-mode enable <-----

set interface "internal"

end

Scope

Solution

- This is an expected behavior.

By default on FortiGate, the NTP daemon would start only if 'ntp-sync' is enabled.

Otherwise, it would not respond to the NTP client since it does not have a valid reference (manual settings are not considered).

To use FortiGate as NTP server, it is necessary to have NTP sync enabled either with FortiGuard or with custom servers as below :

# config system ntp

set ntp-sync enable

set type custom/fortiguard

set server-mode enable

set interface "internal"

end

1711

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Troubleshooting Tip : FortiGate with manual time setting is not responding to NTP queries even though server-mode is enabled

You are leaving our website