Cisco Cisco Firepower Management Center 2000 Guía Para Resolver Problemas

  

 

These should normally be automatically populated by the system policy, but there have been
cases where these stanzas were missing. If they need to be modified or changed you will need to
restart sfipproxy and sftunnel as follows:

admin@FireSIGHT:~$ sudo pmtool restartbyid sfipproxy

admin@FireSIGHT:~$ sudo pmtool restartbyid sftunnel

3. Verify if a 

ntp.conf

 file is available on the 

/etc

 directory.

admin@FireSIGHT:~$ ls /etc/ntp.conf*

If an NTP configuration file is unavailable, you can make a copy from the backup configuration file.
For example:

admin@FireSIGHT:~$ sudo cp /etc/ntp.conf.bak /etc/ntp.conf

4. Verify if the 

/etc/ntp.conf

 file is populated correctly. When you apply a system policy, the

ntp.conf

 file is re-written.

Note: The output of an 

ntp.conf

 file shows the timeserver settings configured on a system

policy. The time stamp entry should show the time when the last system policy applied to a
device. The server entry should should show the specified timeserver address.

admin@FireSIGHT:~$ sudo cat /etc/ntp.conf

# automatically generated by /etc/sysconfig/configure-network ; do not edit

# Tue Oct 21 17:44:03 UTC 2014

restrict default noquery nomodify notrap nopeer

restrict 127.0.0.1

server 198.51.100.2

logfile /var/log/ntp.log

driftfile /etc/ntp.drift

Was this document helpful? 

Thank you for your feedback.

  (Requires a 

.)

The 

 is a forum for you to ask and answer questions, share suggestions,

and collaborate with your peers.

Refer to 

 for information on conventions used in this document.