You can use NTP on the PIX Firewall (1) for certificate revocation lists (CRL) because it is time stamp sensitive; and (2) because it makes troubleshooting events easier.