topic Re: Cisco ASA5510 wrong time in Network Security

Cisco ASA5510 wrong time

lawsuites — Mon, 11 Mar 2019 18:00:44 GMT

Through ASDM i checked the time of our firewall it shows may2003. I want to fix this but i am afraid if i did this asa5510 setting may go away or something else will happen. Does the time matter on firewall and should i change it?

Re: Cisco ASA5510 wrong time

Federico Coto Fajardo — Thu, 17 Jun 2010 13:49:12 GMT

Hi,

It is a good idea to have the correct time.

If you're using digital certificates or time-based ACLs or any feature based on time, it is required that the time is set up correctly.

Also very helpful for logging and troubleshooting.

However, it is not mandatory to have the ASA with the right time to have it operational.

Federico.

Re: Cisco ASA5510 wrong time

GrumpyBear — Thu, 17 Jun 2010 15:32:55 GMT

Yes - dear god change the time or even better find a NTP source to synchronize to. If you ever have to produce your logs in a investigation and your timestamps are out your case (and perhaps your job) will die in the starting gates. Having said that if your log server has the correct time and it stamps the entries, then the device being unsynchronised is just, well, embarassing but not neccesarily carrer limiting.

Digital certificates will also not behave (or some methods of authentication) if the time is not accurate.

Re: Cisco ASA5510 wrong time

lawsuites — Thu, 17 Jun 2010 15:48:20 GMT

Thanks Federico and GrumpyBear(like the name), before i do this, i would like to know and want to make sure that non-of the setting and network will go down. Right? becasue someone was telling me that they chagned time on firewall and somehow all of their setting went away.

Re: Cisco ASA5510 wrong time

Federico Coto Fajardo — Thu, 17 Jun 2010 16:04:43 GMT

Nothing is going to fail, unless you have digital certificates that expire on a certain time, if the time was wrong and you change it, perhaps the certificates couuld fail.

There are a few time-dependent applications...

If this is not the case, you can change the time with no problems.

Federico.