Sophos XG - Application


I am currently testing Sophos XG in the lab and am facing a problem:

How can I block the IPSec and SSL VPN in the LAN, I don't want the users are able to set up a VPN in the LAN - with the UTM it was easily configured under Application - where can I find this setting in the XG? I found the PPTP and L2TP but not IP SEC and SSL VPN.

A second question:
Currently NTP Server is not available on XG, what version will this feature be available?

Thank you very much for your help.

Best regards