TIMING, TEST & MEASUREMENT

Accurate network time synchronization iscritical for network log file accuracy, billingsystems, electronic transactions, databaseintegrity, software development, and manymore essential applications in today’s corporate enterprise. Symmetricom’sDomain Time™ II software in combinationwith a GPS referenced network time serverdelivers the only comprehensive networktime synchronization solution available today.

Domain Time II is a comprehensive softwaresolution that simplifies time synchronizationacross the network. Versatile time clientskeep the network hierarchy synchronized to a GPS referenced network time server. Easyto use management tools simplify and automate many tasks related to keepingthese clients up-to-date. Monitoring functions track time client sync across thenetwork and notify you ofany problems. The result isa reliable time sync systemthat requires little management overhead andoffers tremendous value tothe integrity of networkoperations and applications.

Domain Time II’s management toolsenable complete control of your entirenetwork time hierarchy from a single workstation.

You can install, update, configure, monitortime synchronization and troubleshoot, andtrack Domain Time II components enterprise-wide. This eliminates the timeinvolved in manually installing and maintaining time software on large numbersof machines distributed across the network.

Precise delivery of time is made possiblethrough high-precision time protocols, timesource averaging, clock training, slewing, target seeking, and an efficient time cascadeupdate hierarchy. On large Windows domainnetworks the software servers automaticallytake over for each other when one becomesunavailable, and clients automatically findalternate servers if there’s a failure. Timecomponents can also be set manually formultiple levels of fallback time sources.

Domain Time IITime Synchronization Software SuitePrecise Time Synchronization for the Entire Enterprise

KEY FEATURES• Comprehensive Time Client, Server & Management Software for Precise Time Synchronization Across the Network

• Install, Update, Configure, Monitor, and Troubleshoot All Time Clients From a Single Workstation.

• Adaptable Time Hierarchy Automatically Adjusts to Changes in the Network Assuring Clients Access to the Correct Time

• Detailed Event Logging for Time Auditing Purposes

• Broad Windows OS Support

KEY BENEFITS• Precisely Time Synchronize MissionCritical Network Operations andApplications

• Monitor Network Synchronization and Be Alerted When Synchronization is Outside Your Specifications

• Hold Network Time Accuracy Within Specified Limits

• Ensure Accurate Time on All Network Clients

• Reduce or Eliminate Costs Involved in Installing and Managing Time Synchronization Across a Network

• Manage Time Synchronization on Both Large and Small Networks Just as Easily

• Improve Network Log File Accuracy to Speed Network Diagnosis and Forensics

Domain Time II SoftwareComponents

Domain Time II is a comprehensive timesynchronization system, consisting ofcompletely-integrated components.Together, they ensure that the time foryour entire enterprise is always correct,that you always know how your clocksare performing, and that you can provethe sync status of any machine at any time.

Domain Time II ClientHigh-accuracy time client for Windows:fully configurable, fully automatic, orentirely manual. Can completely replacethe less accurate Windows Time Service.

Domain Time II ServerActs as part of the Domain Time distribution hierarchy or independently.Can completely replace the WindowsTime Service.

Domain Time II Management ToolsInstall, configure, analyze, test, andmonitor your entire Domain Time synchronization system from your desktop.

Manager is the master control centerfor your Domain Time system. You canremotely install, upgrade, monitor, andtrack licenses of Domain Time on anymachine across your network.

Monitor Service automatically monitorsthe synchronization of critical systemsand provides real-time alerting oferrors, also provides advanced variancereporting and historical records.

Update Server automatically watchesthe network to keep your machinesupdated with current versions of thetime software. It can automatically

install time software on new machinesas they come online without administrator intervention.

Other Tools include a full suite of test-ing, diagnostic, and utility programs toaugment the simple, trouble-free use ofDomain Time II on your network.

Domain Time II Audit Server (Optional)Routinely collects time sync data fromDomain Time components and storesthem to create a secure audit trail. Also audits external time sources for further verification of correct time foraudit trails.

2

Redundant Server

Stratum 1 GPS Time Server

NTP client s/w (on workstation)

NTP client s/w (on server)

NTP server s/w

Management, monitoring and audit s/w for Domain Time II components

Windows Domain Network Conventional Network

PDC

DC

Domain Time II Software Component Legend

Reliable TimeDedicated GPS network timeservers to provide accurate,reliable, and secure time toyour network.

Automatic FailoverThese servers are slaves ofthe Master (PDC). If a DC(Slave) is promoted toPrimary, Domain Time IIautomatically reconfiguresitself. No manual reconfiguration or downtime!

AutomaticReconfigurationDomain Time II clients canobtain their time settingsautomatically from anyDHCP server. No manual configuration!

Remote ManagementDomain Time II can beremotely installed and controlled from a single workstation. Real-time monitoring & automatic alerts if network time exceeds your thresholds.

NTP Client & ServerSoftwareCustomize time distribu-tion on your network withclient and server software.Create a flat network withall clients getting timefrom the Stratum 1 serveror create a hierarchyusing the server software.

Network Wide Sync Advantages

AccuracyAccurate time helps your IT investmentpay off since your systems always have the correct time, keeping all ofyour time-dependent systems accurately synchronized. Users canalways log in, your expensive clustering servers and storage systemslogs are synched, and your email andaccounting systems always have thecorrect date and time. • Clients run as system services,machines sync automatically whether or not someone is logged in.• Clients accessing via VPN sync automatically when a connection to the network is activated.• Sophisticated network latency and clock drift data algorithms provide millisecond accuracies. • Time source averaging among multiple sources to determine the likely best "true time".• Configurable clock slewing to synchronize time without time jumps or setting the clock backwards.• Clock training to adjust local clock rate to be more accurate.

ManageabilityInstallation and ongoing maintenance &troubleshooting of time synchronizationis reduced or even eliminated. • Components can be installed, upgraded, and configured network-wide from a single workstation using the Management Tools.• Clients automatically discover the correct time servers and protocols.• Monitor time status network-wide and raise out-of-sync alarms using Monitor Service or optionally Audit Server.• Complete compatibility with Windows Active Directory, including graphical utility to monitor and configure the Windows Time service.• Advanced time analysis tools, including real-time graphical displays of accuracy and latency.• Windows time zone settings can be set remotely using the Management Tools.• Comprehensive documentation and excellent technical support.

Redundancy• Components compare time among various sources and automatically choose the most reliable source.• Multiple levels of fallback in case of network error or time server unavailability.• Time hierarchy adapts gracefully to compensate for failed/unreachable components.

SecurityDomain Time II helps ensure the timeportion of your infrastructure is hardened against intruders and blunderers. • Domain Time II uses your existing domain (Active Directory tree/forest) structure and access permissions.• Works with or without Active Directory enabled.• Administrative permissions required to change configuration settings.• Clock change monitor prevents manual tampering with the system time and date.• Logged-in users do not need clock-changing permission.• Built-in Denial of Service and IP access lists for unparalleled protection from malicious and inadvertent interference with network time.

TraceabilityIf you need to know and be able todemonstrate that your electronicrecords are correct, Domain Time IIallows you to automatically providecompliance without requiring any addi-tional work for employees, or having toimplement expensive custom systems. • Components keep detailed log files with selectable retention options and real-time log viewer.• Graphical displays and raw time drift data is available on time sync components.• System tray icon provides instant visual feedback of correct system sync.• Alerts are generated and logged if time is not being synced correctly.• Complete time sync data can be automatically collected centrally into a secure audit trail.

3

AUDIT SERVER(Optional Domain Time II Add-In)

Audit Server is a Domain Time II add-indesigned to provide a secure, verifiableaudit trail of the time synchronization ofyour network. It automatically providesthe clear, indisputable records you need to easily resolve any contestedtimestamp or synchronization issue that may arise.

Federal regulatory agencies as well asmajor securities organizations alreadyrequire this type of audit collection toprevent fraud and to establish the validity of transactions. Audit Servermeets or exceeds such requirementsand makes it painless to comply withthe regulations.

The records collected by Audit Serverinclude complete information to allowauditors to determine precisely when amachine was last synchronized, withwhat time source, as well as its variancefrom the reference time source. AuditedTime is being able to prove conclusively(on demand) whether the time on anymonitored system was correctly synchronized at a particular time anddate with a specified time source.

Audit Server uses the built-in time synchronization and data collectioncapabilities of the Domain Time II timesynchronization components (DomainTime II Server and Clients) to constructand maintain a verifiable and secureaudit trail indicating when the clock on amachine was last synchronized. Domain

Time II components all work together toeasily and automatically provide AuditedTime on your network with minimalintervention on your part.

Auditing Best Practice #1Identifying Monitored Machines

All Domain Time II Server and Clientservices are individually identified usinga unique serial number that is assignedwhen the Domain Time software isinstalled. Even if the IP address or nameof the machine changes, the auditrecords will clearly identify the machinerunning that particular instance ofDomain Time II.

Auditing Best Practice #2 Accurate and Reliable NetworkSynchronization

A Domain Time II Server connectssecurely to a trusted network timesource such as a Symmetricom dedicated GPS referenced network timeserver, and then distributes that timeaccurately and verifiably to every time-aware machine on the networkusing the Domain Time II time distribution system.

In addition, Domain Time II componentshave a function called Clock ChangeMonitor that prevents users from manually changing the time onmachines to falsify records. DomainTime II also has sophisticated security

4

KEY FEATURES• Automatically Audit the Time on Your Network

• Clear, Indisputable Records

• Generate Alerts if Time or Audit Period Exceeds Specified Tolerances

• Integrates Perfectly with Domain TimeII Time Synchronization Software Suite

• Integrates with Existing Network Management Programs

KEY BENEFITS• Complete Records of TimeSynchronization Accuracy of theComputers on Your Network

• Know When a Machine was Last Synchronized, with What Time Source, as Well as its Variance from the Reference Time Source

• Peace of Mind From an Automatic Software System Routinely Auditing Time on Your Network

• Know That You Will be Notified if Time or Audit Period is Out of Tolerance

• Cross Check Network Time with Independent Time Sources for Historical Validation

SYMMETRICOM, INC.

2300 Orchard ParkwaySan Jose, California 95131-1017tel: 408.433.0910fax: 408.428.7896info@symmetricom.comwww.symmetricom.com

©2010 Symmetricom. Symmetricom and the Symmetricom logo are registered trademarks of Symmetricom, Inc. All other trademarks arethe property of their respective companies. All specifications subject to change without notice. DS/DomainTime II/0410/PDF

features to ensure that the entire system time is correct, including protection from rogue time servers,Denial-of-Service attacks, and more.

Auditing Best Practice #3Retrieval of Vital Time Sync Information

Domain Time Servers and Client services keep detailed internal statisticson their operation which is regularlyqueried by Audit Server. The statisticsinclude such information as thename/IP address and time of the lasttime source used for synchronization,

the amount of correction to the localclock that was made, the protocol usedto set the time, etc. Statistics are regularly retrieved from clients andservers using the Domain Time II protocol, which allows for efficienttransfer of the information to the AuditServer, with a very small amount oftraffic. This means that the auditprocess is very low-overhead and hasminimal impact on the network.

Audit Server can also obtain the currenttime from an NTP time source at thetime an audit occurs. This allows the

audit record to include at least basicinformation from any NTP machines(such as a GPS based network timeserver or router) that may also beinvolved in providing time to the network. This also can serve as a timecross check and historical validation ifyou also monitor an official public timesource.

Auditing Best Practice #4Regular Collection of Audit Records

The Audit Server automatically contactsDomain Time II Servers and Clients (andany specified NTP servers) to collecttheir audit data on a schedule you specify. This information is compiledinto compact record files that include all relevant information about eachmonitored system. Each record is optimized to minimize the amount ofdisk space used to retain the records.The Audit Record Viewer allows you toview the data in an easy-to read format,and to extract the data to text files in asummary or full-detail form.

Auditing Best Practice #5Automatic Error Notification

Audit Server verifies that machines youhave selected to be audited are actuallyhaving their time set and that they areresponding to the audits. If any machinefails to be synchronized within yourdesired tolerance, or if a machine misses more audits than your specifiedmaximum error limit, an email alert isautomatically generated so that theproblem can be addressed immediately.

Domain Time II Specifications

System RequirementsOperating System 32-bit 64-bit Client Server Manager Audit Server

Windows XP, 2003 (& R2),Vista, 2008 (&R2), Win7

DocumentationAll documentation is online at http://dtdocs.ntp-systems.com/

4 4 4 4 4 4

WarrantyOne(1) year of updates/downloads included in price.