What I would do is take a tcpdump on the interface of the firewall which faces the Web Reporter (the default port is 4500). Write this tcpdump to a file, export it to a PC, and open it in Wireshark (or, easier, do the tcpdump via the Admin Console GUI and the resulting file will open automatically in Wireshark when it's done [provided you have that installed on your PC]). Look at the data the firewall is sending, it's in plaintext. If this time and GMT offset is not what you'd expect the problem could be on the firewall. If this time and offset is correct then the issue exists on the Web Reporter.