When you set a Windows server as the NTP time source for the SWG, but that server is not itself using an NTP server as it's time source, the SWG will accept the server and pass the test in the UI, but will gradually fall out of sync, causing kerberos authentication to fail. This does not occur when the time source is itself set to use an external NTP server.
Symantec Engineering is currently investigating this issue. Please monitor this document for updates.
The current workaround is to set the Windows server to use an external time source by configuring w32time to connect to an NTP server.
Alternatively, both SWG and Windows server can be set to use a separate NTP server as their time source.
SWG is set to use a Windows server as its time source, and that server is using itself as its time source.
Imported Document ID: TECH170907
Subscribing will provide email updates when this Article is updated. Login is required.