Hallo,ich nutze die Sophos UTM unter anderem als internen NTP Server. Die Sophos selber holt ihre Zeit bei drei ptbtimeX.ptb.de Servern.Zusatzlich zum NTP-Traffic setzt die Sophos auch noch minütlich PINGs auf die ptbtimeX.ptb.de Server ab. Kann man diese PINGs abschalten?
Hi Harald Dunkel,
Thank you for reaching out to the Community!
Where do you see these pings to the NTP servers? I didn't see any pings to the configured NTP server in my LAB UTM.
Would it be possible for you to share the screenshot of how ICMP settings are configured on your firewall? Go to the Network Protection > Firewall > ICMP.
Community Support Engineer | Sophos Technical SupportSupport Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts If a post solves your question use the 'Verify Answer' button.
Hi,I can see the ICMP traffic on the next firewall ...
Here are the settings:
Thanks for the update.
I'd advise you to run a packet capture on UTM on that destination NTP server IP address to see the actual source of the traffic.
the source IP is the same as the "Initiator IP" in the first screenshot -> it is the same under every black line. I just didn't want to post details about our internal network structure here.
There are no other network interfaces in this tranfer network - only the external interface from the Sophos and a interface of our internet facing firewall. So I am pretty sure that the origin is the Sophos