"show ntp" display "error" status on PAN-OS 10.1.10/10.2.5.

• "show ntp" command display the status as "error"

admin@PA-VM> show ntp

NTP state:
    NTP synched to 172.16.196.200
    NTP server: 172.16.196.200
        status: error             
        reachable: yes
        authentication-type: none

• Palo Alto Firewalls
• PAN-OS 10.1.x and 10.2.x
• NTP

• DNS Server is not reachable or
• DNS lookup cannot be completed within specified time of 5 seconds.

1. Check whether the configured DNS servers configured are reachable.

>ping host <primary dns server>

2. If the DNS servers are reachable, check the time taken to resolve the NTP servers. Change the DNS server configuration if required.
3. Recheck check NTP status.
4. If the issue still persists with DNS servers responding speedily (less then 5 sec), open a support case.