2.1.4 Ensure correct system time is configured through NTP


You can either manually set the FortiOS system time, or configure the device to automatically keep its system time correct by synchronizing with a Network Time Protocol (NTP) server.

These settings enable the use of primary and secondary NTP servers to provide redundancy in case of a failure involving the primary NTP server.


NTP enables the device to maintain accurate time and date when receiving updates from a reliable NTP server. Accurate timestamps are critical when correlating events with other systems, troubleshooting, or performing investigative work. Logs and certain cryptographic functions, such as those utilizing certificates, rely on accurate time and date parameters. In addition, rules referencing a Schedule object will not function as intended if the device's time and date are incorrect. For additional security, authenticated NTP can be utilized. If Symmetric Key authentication is selected, only SHA1 should be used, as MD5 is considered severely compromised.


For many features to work, including scheduling, logging, and SSL-dependent features, the FortiOS system time must be accurate.


You can only customize NTP setting using CLI. In this example, we'll assign pool.ntp.org as primary NTP server and as secondary NTP server.

FGT1 # config system ntp
FGT1 (ntp) # set type custom
FGT1 (ntp) # config ntpserver
FGT1 (ntpserver) # edit 1
FGT1 (1) # set server pool.ntp.org
FGT1 (1) # next
FGT1 (ntpserver) # edit 2
FGT1 (2) # set server
FGT1 (2) # end
FGT1 (ntp) # end
FGT1 #

Default Value:

By default, Fortinet uses the NTPs server of the FortiGuard

See Also


Item Details


References: 800-53|AU-7, 800-53|AU-8, CSCv7|6.1

Plugin: FortiGate

Control ID: 623dbfb0c1989bb02ae0d1051eac4d6f37988f1aca8c289485fde2f84fd50b2b