Core issue
The Cisco Secure Intrusion Detection System (IDS) Sensor can be configured to set the time source from an authenticated Network Time Protocol (NTP) server.
Resolution
Because the sensor requires a consistent time source, Cisco recommends that you use an NTP server. To configure the sensor to use an NTP server as its time source, refer to: Configuring the Sensor to Use an NTP Server as its Time Source.
Note: The sensor requires an authenticated connection with the NTP server. The sensor only supports MD5 hash algorithm for key encryption.