Time Settings (Zenitel Connect Pro)
From Zenitel Wiki
Introduction
Cybersecurity requirements mandate that all devices connected to Zenitel Connect Pro are time‑synchronized with the server. For this reason, Zenitel Connect Pro functions as the NTP server for all connected devices.
Zenitel Connect Pro can itself synchronize time with an external NTP server. If no NTP server is available, the system time can be set manually.
Although a time zone can be configured, Zenitel Connect Pro internally uses UTC. All logs and all timestamps included in API responses are generated in UTC. The configured time zone is used only to present the correct local date and time on devices equipped with a display.
Zenitel Connect Pro also supports NTS. NTS stands for Network Time Security, and is a modern security extension to NTP.
Time configuration
The time settings can be configured in the System > Service Connections section
 |
| Time Settings |
NTP Server
The default NTP Server address is pool.ntp.org, edit as appropriate. The time zone is by default UTC. The timezone can be changed by either:
- Selecting a timezone from the dropdown list
- Clicking the button labeled Map and subsequently selecting a timezone on the map
Manual
If an NTP server is not available, select Set time using: Manual. Edit the date and time directly in the edit field, or use the date/time picker to set date and time. The time should be set as UTC and adapted to local time by setting the correct timezone.
- Selecting a timezone from the dropdown list
- Clicking the button labeled Map and subsequently selecting a timezone on the map
Network Time Security (NTS)
Zenitel Connect Pro supports NTS as a secure extension to NTP, providing authenticated time synchronization. When "Use NTS" is enabled, the system performs a secure key‑exchange with the external NTS server using the industry‑standard NTS-KE port TCP 4460 before continuing time synchronization over UDP 123.
Zenitel Connect Pro’s integrated firewall manages inbound traffic only. Since NTS key‑exchange requires outbound TCP 4460, no inbound firewall rule is needed on the Zenitel Connect Pro server for NTS to operate. However, any upstream or perimeter firewalls in the customer's network must allow outbound TCP 4460 to the chosen NTS server. UDP 123 must also be permitted outbound for the actual NTP/NTS time synchronization.