Synchronizing the time on nodes of Kaspersky Industrial CyberSecurity for Networks with the time source used for industrial network devices

To correctly correlate the time of registration of events with the time when events occurred in the industrial network, time must be synchronized in the system. The time on nodes with Kaspersky Industrial CyberSecurity for Networks components installed must be synchronized with a common source of time used by industrial network devices.

When centrally installing Kaspersky Industrial CyberSecurity for Networks, you can enable automatic time synchronization between the Server and nodes where sensors are installed. In this case, the node with the Server installed will serve as the time source for nodes that have sensors installed. It is recommended to use the software tools from the operating system of the computer performing Server functions to configure time synchronization between the Server and the common time source used by devices in the industrial network. For Server time synchronization, you can use the standard protocols known as Network Time Protocol (NTP) and Precision Time Protocol (PTP).

NTP is used for automatic time synchronization between the Server and other nodes. In this case, you cannot configure synchronization with other time sources or use the PTP protocol on nodes that have sensors installed.

If a sensor was installed locally using the kics4net-install.sh script, automatic time synchronization with the Server is not performed on this node. If this is the case, you must configure time synchronization on the Server and on all nodes containing sensors that were installed locally.

For example sequences of operations for configuring time synchronization, please refer to the Appendices.