Block Windows Update but allowing time.windows.com?

Hi Miguel Cruz,

Thank you for reaching out to the Community! 

Have you tried to configure the FQDN rule for "time.windows.com"? If not, try to configure LAN to WAN firewall rule on top with the "time.windows.com" in the destination network.

Check out the following KBA for more info: Sophos XG Firewall: How to Configure FQDN Host.

Thanks,

Hi,

should be using port UDP 123 - NTP. You will not se it in your daily reports because the XG does not seem to understand port 123 is NTP even when it only talks to time servers.

Ian