HLNCC® HLewis Network Consulting Corp.

• Home
• Services
• Company
• Careers
• Resources
• News

Daylight Saving Time Updates

Check Point/Nokia – Juniper/Netscreen – ISS – Cisco Systems – Microsoft

Background

In August 2005, the United States Congress passed an energy bill that extends Daylight Saving Time (DST) in the U.S. by several weeks. Beginning in 2007, DST will start on the second Sunday of March and end the first Sunday in November.

For the actual text of the energy bill, see page 52 of the document located at http://energy.senate.gov/public/_files/ConferenceReport0.pdf.

Check Point/Nokia

This information pertains to the application of Daylight Savings Time in the Check Point/Nokia environments.  Please remember that both firewalls and management stations should be included in your plan.

Solution ID: #sk32456
http://secureknowledge.checkpoint.com/SecureKnowledge/viewSolutionDocument...

The following versions of IPSO are certified by Nokia to be compliant with the new DST:
    * 3.8 build 058
    * 3.8.1 build 044
    * 3.9 build 052
    * 4.0 build 040
    * 4.1 - all builds
    * 4.2 - all builds

The following versions of SecurePlatform are certified by Check Point to be compliant with the new DST:
    * VPN-1/FireWall-1 NG with AI R55 HFA_19
    * VPN-1 Pro NGX R60 HFA_04
    * VPN-1 Pro NGX NGX R61 take 56 (dated Aug 2006)
    * VPN-1 Pro NGX R62

The following versions of Crossbeam XOS are certified by Crossbeam Systems to be compliant with the new DST:
    * XOS 7.2 and later.

The following versions of Windows operating systems are certified by Microsoft to be compliant with the new DST:
    * Only Windows XP SP2, Windows 2003 Server and Vista versions will be fixed.
      Windows Update will begin pushing out fixes 1/02/2007.

Q&A 1411562
https://support.nokia.com/kmss/detail.html?ch=qa&id=0610174135f44e010f82ef6665007432

Currently the version of IPSO that support the new Daylight Saving Time for 2007 are as followed.
    * IPSO 4.1 all builds
    * IPSO 4.0 build 40 and later
    * IPSO 3.9 build 52 and later
    * IPSO 3.9.92 (NMDS-4.2)
    * IPSO 3.8.1 build 44 and later
    * IPSO 3.8 build 58 and later

The listed versions above allow you to use the CLI to configure the daylight savings rules. Please reference the IPSO release notes and the CLI guide for the correct syntax.

VPN-1 Edge is not affected by this issue since the logs are already sent in UTC time to SmartCenter and SMP.

Solution ID: #sk32456
https://secureknowledge.checkpoint.com/SecureKnowledge/viewSolutionDocument...

Back to Top

Juniper/Netscreen

IVE-SSLVPN
KB9393
http://kb.juniper.net/CUSTOMERSERVICE/index?page=kbdetail&article_id=KB9393

The Extended DST is supported in IVE builds 5.3r7 and above.

If you are using the Secure Meeting feature, upgrade to the following software releases which contain the fix for the DST: 5.2R7, 5.3R10 and 5.4R2.1. These are expected to be available by February 9th.

IDP
http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2007-02-008...

Solution: IDP release 4.0r1 is not affected by this DST Change. All releases of IDP version 3.1, 3.2 and 4.0r3 are affected by the DST change.

A Patch that includes the DST fix is available for IDP 3.1r5, 3.2r4 and 4.0r3 releases. This patch is available for download from the IDP software download page. 4.0r1 already includes the fix for the DST change and is not affected.

If you are running IDP 3.1, 3.2 or 4.0r3, in order for the device to observe the correct DST schedule for 2007 it should be on one of the supported releases ( 3.1r5, 3.2r4 or 4.0r3) and the DST patch needs to be applied. If you are running IDP 4.0r1 release no change is required.

http://www.juniper.net/alerts/viewalert.jsp?actionBtn=Search&txtAlertNumber=PSN-2006-12-011

Solution: In order for the device to observe the correct DST schedule for 2007 it should be upgraded to one of the following releases before March 11th, 2007:

ScreenOS 6.0, which is expected for the fist half of 2007, is not affected by this issue. It not only includes the new schedule but also has a new feature that allows the administrator to define custom DST transitions.

Back to Top

ISS

Knowledgebase
Visit the Knowledgebase for details on how the change in the U.S. DST will affect your IBM Internet Security Systems (ISS) products. 

Knowledgebase articles on DST changes

Product Updates
This table lists ISS appliances and the minimum versions which support the date changes.

Hardware

Back to Top

Cisco Systems

This Energy Policy Act changes the dates for Daylight Saving Time in the United States. In 2007, DST begins on the second Sunday in March and ends the first Sunday in November. The Secretary of Energy will report the impact of this change to Congress. Congress retains the right to resume the 2005 Daylight Saving Time schedule once the Department of Energy study is complete. This law takes effect March 1, 2007.

The operating systems of most Cisco products that support Daylight Saving Time have built in mechanisms to automatically change the times, based on CURRENT United States rules (“recurring” keywords in time zone commands). Once the new Act is implemented, the time on the devices will continue to change according to the OLD rules, unless changes are made.

Configuration or OS changes will need to occur on the devices that implement the old rules, so that the device time can be correct, in logs and other time stamped communications from the device/platform. Please refer to this document for versions that support the new rules for Daylight Saving Time: http://cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00807ca437.shtml

If image upgrade is not possible, the following workaround are available:

Cisco IOS Software Platforms
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00

Cisco CatOS Platforms
(release 5.4 and later)
set summertime enable EDT
set summertime recurring second Sunday March 02:00 first Sunday November 02:00 60

Cisco PIX and ASA Platforms
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00

Cisco VPN 3000 Concentrators (Altiga OS)
DST Configuration parameters for a system that runs Altiga OS cannot be changed
you must set the time ahead one hour when the new Daylight Saving Time occurs on the 2nd Sunday in March.
DST should be disabled on these devices so the device does not attempt to set ahead its clock on the 1st Sunday in April.
Note: The information provided in this section is a workaround for those who choose not to upgrade to the fixed code once it is available.

CiscoWorks, ACS software
use the time provided by the operating system
install the operating system patch

Voice and Unified Communications
consult the appropriate System Upgrade Manual for recommended order in which to update products
There is a separate System Upgrade Manual for each version of CallManager that a system is built around
1.CallManager 4.x
 http://cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_integrated_systems_documentation09186a0080754f4d.html
2.CallManager 5.x
http://www.cisco.com/go/unified-techinfo

Cisco Intrusion Detection and Prevention
use the setup option from the CLI:
Modify summer time settings? [no]:yes
Recurring, Date or Disable[recurring]:
Start Month[mar]:
Start Week[2]:
Start Day[sun]:
Start Time[02:00:00]:
End Month[nov]:
End Week[1]:
 End Day[sun]:
End Time[02:00:00]:
DST Zone[]: EDT
Offset[60]:

Cisco ACNS (Cisco Application and Content Networking System)
clock summertime EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00

Cisco Content Services Switch (CSS)
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00

Cisco IOS XR
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00

Cisco Storage Switches (SAN-OS) – Storage MDS 9500 Series
By default, the MDS SAN-OS does not adjust for Daylight Saving Time
no code changes are required
clock summer-time Eastern 2 Sun Mar 2:00 1 Sun Nov 2:00

Cisco ONS 15000 Series
http://cisco.com/en/US/tech/tk648/tk362/technologies_tech_note09186a00807ca437.shtml#ons

Back to Top

Microsoft

General
http://support.microsoft.com/gp/cp_dst

2003 and XP
http://support.microsoft.com/kb/931836

2000
http://support.microsoft.com/kb/930688

Back to Top