Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall Time getting out of sync

I use One-Time Password and the Time on the device is very important.

I tried to "Use pre-defined NTP Server"  My Time zone is "Australia/Sydney" 

For some reason, the Current Time is out by 30 minutes. 

So I tried to use "Do not use NTP Server" and set the time manually. It works for little while, but the clock kept getting out of sync and then VPN users cannot login because the One-Time Password from the authenticator app just won't work.

Any ideas?



This thread was automatically locked due to age.
  • Hi,

    what model XG and how old? Sounds like the onboard clock is having issues.

    what ntp server are you using?

    ian

  • XG 135w I fixed the clock last night, but this morning the clock is out of sync again.

  • Check the logviewer system. Also please post a copy of the time setting. Though having asked those questions I think you need to raise a support case.

    ian

  • Here is the logviewer when I filter the Admin log with search word "Time"

    You see, this morning, the time has gone out by 2 hours, I had to adjust the time from 10:30am back to 8:50am

    I am scratching my head on how this happen. 

    Time Log comp Status Username Src IP Message Message ID
    24/08/2021 8:50 GUI Successful tobyadmin 192.168.1.180 Date and Time setting were changed '2021-08-24 10:30:55 AEST' to '2021-08-24 08:50:51 AEST' by 'tobyadmin' from '192.168.1.180' using 'GUI'  17502
    23/08/2021 16:27 GUI Successful tobyadmin 192.168.1.180 Date and Time setting were changed '2021-08-23 16:18:10 AEST' to '2021-08-23 16:27:27 AEST' by 'tobyadmin' from '192.168.1.180' using 'GUI'  17502
    23/08/2021 15:27 GUI Successful tobyadmin 192.168.1.180 Date and Time setting were synchronized with NTP Server by 'tobyadmin' from '192.168.1.180' using 'GUI'  17504
  • Because I have stopped using the NTP Server, time is just set manually.

  • What happens when you use the full admin account, rather than yours?
    ian

  • --

    It looks like CMOS Battery error which can be confirmed upon following steps.

    Please connect appliance with serial console and reboot the firewall.

    During booting, are you getting any CMOS battery error? I.e. Bad checksum

    If yes, please capture log/snapshot and raise case with Support to raise replacement of the Current appliance.

  • That wouldn't explain why we can't use NTP servers.  I'm having the same problem.  I am unable to use NTP servers. Setting manual NTP servers or pre-defined NTP servers does nothing.  My time is off.  Can't use SSL VPN with OTP. XG115  Sure I can set time manually but inevitably the time will become too out of sync for OTP to work without NTP.

  • I don't think CMOS battery has any error. The device only been used for 1 year. I reckon it has a software bug in the device itself. I will raise a ticket with support to check out why this is happening.