Ping auf NTP Server

Hi Harald Dunkel,

Thank you for reaching out to the Community! 

Where do you see these pings to the NTP servers? I didn't see any pings to the configured NTP server in my LAB UTM. 

Would it be possible for you to share the screenshot of how ICMP settings are configured on your firewall? Go to the Network Protection > Firewall > ICMP.

Thanks,

Hi,
I can see the ICMP traffic on the next firewall ...

Here are the settings:

Regards

Hi Harald Dunkel,

Thanks for the update. 

I'd advise you to run a packet capture on UTM on that destination NTP server IP address to see the actual source of the traffic. 

Thanks,

Hi Harald Dunkel,

Thanks for the update. 

I'd advise you to run a packet capture on UTM on that destination NTP server IP address to see the actual source of the traffic. 

Thanks,

the source IP is the same as the "Initiator IP" in the first screenshot -> it is the same under every black line. I just didn't want to post details about our internal network structure here.

There are no other network interfaces in this tranfer network - only the external interface from the Sophos and a interface of our internet facing firewall. So I am pretty sure that the origin is the Sophos