topic Re: NTP on FTD is out of sync in Network Security

NTP on FTD is out of sync

AhmadKhader — Mon, 15 Sep 2025 06:22:15 GMT

I have 4110 FTD as HA managed by FMCv. I get an alert on the FMC that says time synchronization failure and it says the 2 FTDs are out of sync ( For Time).

I can see the time on FTDs is not the same as FMC. The FMc is using UTC +2, meanwhile the FTD UTC.

Also, from the FCM ( FirePower Chassis Manager) I can see the FTD is in sync with the NTP Server. Also, from the CLI I can see the output is fine.

Any ideas?

Re: NTP on FTD is out of sync

balaji.bandi — Mon, 15 Sep 2025 06:47:10 GMT

Not sure where you seeing this error.

I have noticed these on the Logs, so you can change the region on FMC to have a Logs correctly show Local Time. (that is the feature)

can you show some output for us to understand the issue

or do the troubleshooting as below :

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215468-configure-verify-and-troubleshoot-netwo.html

Re: NTP on FTD is out of sync

AhmadKhader — Mon, 15 Sep 2025 06:50:19 GMT

The alert is seen on the FMC health monitor.

I followed the shared document, and I have the same output as in the document.

Re: NTP on FTD is out of sync

balaji.bandi — Mon, 15 Sep 2025 07:17:23 GMT

The alert is seen on the FMC health monitor.

any screenshot help here.

as long as they reaching the NTP that should be good., also check time zone configured on the FMC and FTD.

Re: NTP on FTD is out of sync

MHM Cisco World — Mon, 15 Sep 2025 08:49:11 GMT

What is time zone in both ?

Are fmc abd ftd use same NTP?

UTC +2 abd UTC meaning there is different in time zone

But let check

MHM

Re: NTP on FTD is out of sync

AhmadKhader — Mon, 15 Sep 2025 08:51:30 GMT

That is what I am thinking. I can see the FMC and FTDs are in sync with the NTP. The Time on FMC is correct as well as on FCM.

But this error is weird.

Re: NTP on FTD is out of sync

AhmadKhader — Mon, 15 Sep 2025 08:53:02 GMT

Time zone on FMC is Amman/Asia. How can I check it on the FTD?
They are using NTP server and both the FMC and FTD can reach it and they are in sync.
The thing after checking the time on FTD i can see it as UTC not UTC +2. If I solve this one, I think it will be solved.
Any ideas?

Re: NTP on FTD is out of sync

MHM Cisco World — Mon, 15 Sep 2025 09:11:02 GMT

> show clock detail <<- use this for ftd

Also dont change Any settings before you 100% sure it cause issue.

Cisco not recommend to change NTP/time zone/clock because it can lead to disconnect ftd from fmc

MHM

Re: NTP on FTD is out of sync

Aref Alsouqi — Mon, 15 Sep 2025 11:39:28 GMT

You can easily change the FTD timezone from the FMC by going to "Devices > Platform Settings > Time Zone" and change it from there. AFAIK there are no issues in changing the FTD timezone as long as you don't do it from CLI. So, if you do it via the FMC it should be fine. On the other side, although it's not related to the reported issue, please keep in mind that the logs you see will always be with the timezone UTC, and to change that from the FMC you can go to the user profile and change it from there. For instance, if you are logged with the local admin account then on the top right you go to "admin > User Preferences > Time Zone" and you change it from there.