How to check Symantec Advance Threat Protection (SATP) is synchronizing with Network Time Protocol (NTP) server

Products

• Advanced Threat Protection Platform

Issue/Introduction

 

Resolution

You set the SATP to use a NTP server for time synchronization. After the NTP server is specified from Advance Threat Protection (ATP) User Interface (UI) on the path: [Settings]  -> [Appliances] -> select the Appliance listed under[Appliances] -> [Time Server] click [Edit Time Server] -> [Type in IP for internal Time Server] click [Save Time Server].  you want to know if SATP is synchronizing with the NTP server with no problem.

The following methods can be used with admin account.

1. Login to the command line (CLI) via SSH or local console with the admin account.
2. Run the following command to check the current time to verify that the date and time is not drifting too much and is close to the current time.
   
   At the CLI type in:
   
   show --date
    
3. If you are on SATP version 2.3.0 build from the CLI run this command.
   
   At the CLI type in:
   
   status_check
   
   Example output: