Description

Running the SkyATP Advanced Anti-malware diagnostic script returns the following error: 

Time check : [Failure]
Error: Time difference is too large between server and this device. Please adjust your local time

Symptoms

Running the Diagnostic script fails and exits due to time check failure: 

root@sky-srx> request services advanced-anti-malware diagnostics srxapi.us-west-2.sky.junipersecurity.net
DNS check                       : [OK]
SKYATP reachability check       : [OK]
Time check                      : [Failure]
Error: Time difference is too large between server and this device. Please adjust your local time

root@sky-srx>

Solution

The diagnostic is checking the local system time stamp against the cloud servers and if the time difference between the two is greater than 60 seconds, it will generate an error and exit. To resolve this issue you must correct the time on the local SRX.

  1. Check the system local time, validating the Current time against the real time:

    *Time of sample command "2019-01-01 03:49:58 UTC"
     
    root@sky-srx> show system uptime
    ==>Current time: 2019-01-01 03:41:58 UTC<===
    Time Source:  LOCAL CLOCK
    System booted: 2018-08-27 22:13:42 UTC (18w0d 05:28 ago)
    Protocols started: 2018-08-27 22:13:43 UTC (18w0d 05:28 ago)
    Last configured: 2018-10-12 00:06:35 UTC (11w4d 03:35 ago) by jtac
     3:41AM  up 126 days,  5:28, 1 user, load averages: 0.49, 0.50, 0.48
     
    root@sky-vsrx>

  2. Correct the Time on the Local system.

    A. If Time source is NTP, verify your NTP server is correct, else resolve the issue time error on NTP server
    B. If Time source is "Local" or to bypass NTP temporarily, manually correct the time locally on the SRX

    In this example, the system date and time are set to January 01, 2019 and 03:58:00 AM:

    root@sky-srx> set date 201901010358.00
    Tue Jan  1 03:58:00 UTC 2019
    root@sky-srx>

  3. Re-Run the diagnostic script to verify the time is corrected. 

    root@sky-srx> request services advanced-anti-malware diagnostics srxapi.us-west-2.sky.junipersecurity.net
DNS check                                     : [OK]
SKYATP reachability check                     : [OK]
Time check                                    : [OK]
Configuration activation check                : [OK]
SKYATP ICMP service check                     : [OK]
Interface configuration check                 : [OK]
Outgoing interface MTU is default value
IP Path MTU is 1472
SSL configuration consistent check            : [OK]