Web Isolation: Server-Client Time Synchronization

Products

• Web Isolation

Issue/Introduction

This article is intended for users of SymDiag. Though general readers may benefit from the article’s contents, any solutions, insights, or guidance are geared toward those using SymDiag.

Problem

A secure connection is not established between the Web Isolation platform and the end user’s computer. This failure to connect results from differences in time settings between the two machines.

Cause

Both the Web Isolation platform and the end user’s operating system ought to synchronize their respective date and time automatically, using NTP servers. Failure to do so will result in discrepancies in times between the two systems. In such cases, secure connection (using SSL) is likely to fail.

Resolution

Make sure both the Web Isolation instance and the end user’s computer are synchronized with the company’s NTP servers or with globally available ones. Verify that the NTP server is enabled for every gateway, or manually synchronize the two machines.

For further information, see the Symantec Threat Isolation Platform (STIP) Guide for Administrators section on Configuring Security Policy Settings > Defining a Threat Isolation Gateway.