By default Soap messages containing a WS-Security timestamp are rejected if the message claims to be in the future or of the message has expired, this calculation is very precise so if the clocks on the client and server are not completely in synch it is possible for messages to be rejected.

This task allows a time tolerance to be specified for both the 'Created' and 'Expires' value, the configuration options are documented here: -

http://jbws.dyndns.org/mediawiki/index.php?title=WS-Security_options#Advanced_tuning:_timestamp_verification