NTP issue

Hi,

you will need firewall rule to allow NTP out.

Ian

Did that, no change. Have one for out and one for back in? 

Hi John,

you do not need a rule for incoming traffic unless you are providing NTP function s tot he internet.

Please post a copy of your NTP firewall rule and where does it sit in the firewall list?

Ian

Have you checked if these requests appear on other logs as blocked? e.g. IPS?

Hello. they do not. And the logs on the rules I setup are always empty and firewall log shows nothing, administration etc. I noticed that NTP spec says out above ports 1024 but the ntp spec starts at port 1 to 65535. Seems so strange their NTP works fine with these sources but behind the box no. Will just have to work it. Had to use the IP and see it sent it to Microsoft but there is no return on the inbound rule.

Hi,

the inbound rule is only for traffic originating outside of your network. All traffic originating inside your network is shown against the initiating connection.

NTP definition will be something like tcp/udp 1:65535 to 123

Ian

Thanks, certainly seems like it is working just that windows times out every time i try and use the sync button. Said not since 12/2 have had an successful sync.  Will keep thinking on solving it. 

This is solved. Nothing to do with Sophos but was actually a router in front of it. Case closed