Open port 123 for Ubiquiti NTP access

Question

Hi all, 
 I have a XG135 firewall and several RED devices, I also have several devices from Ubiquiti (UNVR and CloudKeys) and they are causing problems. Ubiquiti support keeps telling me that I need to allow access on UDP port 123 which they use for NTP access as the device logs show that the time synchronisation on these Ubiquiti devices is failing (according to Ubiquiti). 
 When I check my XG configuration, I do have access to NTP services enabled and I also added Ubiquitis NTP addresses to the list. Do I need to set up a separate rule to allow access to Port 123? If yes, how do I do that?

Erick Jan · Answer

Hi MCBLC, 
 Thank you for reaching out to Sophos Community. 
 I recommend checking the logs and performing a packet capture/TCPDump to gain more insight into what has happened to the traffic. 
 You may also create an allow firewall rule and position the rule on top without any other policies 
 Kindly check the following links and similar posts. 
 
 Add a firewall rule 
 Allow Port in Sophos Firewall