Palo Alto Networks Certified Network Security Administrator (PCNSA)Initial Configuration and ManagementMedium
A network security administrator needs to ensure that the Palo Alto Networks firewall's clock is synchronized with a reliable external time source. This is crucial for accurate logging, certificate validation, and security policy enforcement. Which setting should be configured to achieve this?
- AConfigure an NTP server.
- BSet the system timezone manually.
- CEnable local clock synchronization.
- DAdjust the system date and time via the CLI.
Show answer & explanationAnswer & explanation
Correct answer: A. Configure an NTP server.
Configuring an NTP (Network Time Protocol) server is the standard and most reliable method to ensure a Palo Alto Networks firewall's clock is accurately synchronized with an external time source. This is vital for many security functions.
Why the other options are wrong
- B. Setting the timezone is important, but it doesn't synchronize the clock with an external source.
- C. Local clock synchronization is not a standard feature; devices typically synchronize externally or rely on their internal clock.
- D. Manually adjusting date/time via CLI is prone to errors and doesn't provide continuous synchronization with a reliable external source.
NTP Synchronization
The process of configuring a Palo Alto Networks firewall to synchronize its system clock with an external Network Time Protocol (NTP) server for accuracy.
- Crucial for accurate logs, certificates, and security policy.
- Configured under Device > Setup > Services > NTP.
- Requires management plane connectivity to the NTP server.
Memory trick: NTP: The firewall's trusty watchmaker for external time.