Configure Synchronization with an NTP Server

Applies to Product: USM Appliance™ AlienVault OSSIM®

Use of an NTP server in your network helps ensure that all system components are correctly synchronized. This is particularly important for timestamp accuracy and auditability in your efforts to comply with certain regulatory standards.

If you plan to configure high availability (HA) High Availability. AlienVault USM Appliance supports high availability by allowing you to switch over from an active (primary) USM Appliance instance to a passive (secondary) USM Appliance instance. in a USM Appliance Standard or Enterprise deployment you must set up one NTP server for your primary nodes and another for your secondary nodes, and synchronize each node to its respective NTP server. See High Availability Configuration.

Important: The NTP server requires use of port 123 over UDP.

To enable or disable synchronization with an NTP server

  1. Connect to the AlienVault Console through SSH and use your credentials to log in.

    The AlienVault Setup menu displays.

  2. Select System Preferences.
  3. Select Change Location.
  4. Select Date and Time.
  5. Select Configure NTP Server.
  6. Select Enable by pressing the spacebar, and then press Enter (<OK>).
  7. Type the hostname or IP address of the NTP Server.

    The application returns you to the Date and Time menu.

  8. Press <Back> until you are on the AlienVault Setup menu again. Select Apply all Changes.
  9. Press <Yes> to confirm.

    USM Appliance applies the changes and restarts all the services, which may take several minutes.