With Network Time Protocol (NTP) enabled, Gateway Enforcer appliance clocks can update to the correct time. This setting is disabled by default, but it can be overridden if it is specified in a group policy.
To enable time updates for Gateway Enforcer appliance from the Symantec Endpoint Protection Manager
In Symantec Endpoint Protection Manager, click Admin.
In the Admin page, click Servers.
Under Servers, select and expand the group of Gateway Enforcer appliances.
Under Tasks, click Edit Group Properties.
On the Advanced tab, check Enable Network Time Protocol.
Enter the IP address or the fully qualified domain name of the NTP server.
From the Enforcer console, you can temporarily change this setting to help troubleshoot time synchronization issues. From the Enforcer console command line, enter Enforcer (configure)# ntp.