Can Cisco ISE run normally without NTP server?

[jj2048]

Upon discussing the requirements for installing Cisco ISE, our customer was not able to provide an NTP server address, as they don't have one yet.

As the title implies, can Cisco ISE run normally without an NTP server?

The deployment will be Two Standalone Nodes in HA.

What do you normally place on the NTP server address on the initial setup if this is possible?

Thank you in advance.

[Mohammed al Baqari · Accepted solution]

Hi,

Installation will go through even if you put a dummy IP but you will run
into an endless number of problems. AD integration won't work because there
is a restriction on the allowed tick slips between ISE and AD clocks.
Certificates might expire which will interrupt ISE operation.

Short answer don't give your customer the option to install ISE without
NTP. In fact you should encourage them to use NTP as this is networking 101
for any organization. Its as simple as making internet routing polling
from pool.ntp.org and ISE sync from your router.

**** please remember to rate useful posts

[marce1000]

        >....don't give your customer the option to install ISE without NTP

                          Indeed!

 M.

[jj2048]

Thank you Mohammed for your explanation. This has been very helpful.
I will do recommend that they set up their NTP soon.

[thomas]

Assuming you allow ISE Internet access, use time.nist.gov or pool.ntp.org

[jj2048]

Thank you thomas, 

I'll try this on our test bench.

I'll also ask what they use on their AD's as NTP server to match it with ISE for the time being.