This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ping auf NTP Server

Hallo,
ich nutze die Sophos UTM unter anderem als internen NTP Server. Die Sophos selber holt ihre Zeit bei drei ptbtimeX.ptb.de Servern.
Zusatzlich zum NTP-Traffic setzt die Sophos auch noch minütlich PINGs auf die ptbtimeX.ptb.de Server ab. Kann man diese PINGs abschalten?

Grüße
Harald

This thread was automatically locked due to age.

0 FormerMember over 3 years ago

Hi Harald Dunkel,

Thank you for reaching out to the Community!

Where do you see these pings to the NTP servers? I didn't see any pings to the configured NTP server in my LAB UTM.

Would it be possible for you to share the screenshot of how ICMP settings are configured on your firewall? Go to the Network Protection > Firewall > ICMP.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Harald Dunkel over 3 years ago in reply to FormerMember

Hi,
I can see the ICMP traffic on the next firewall ...

Here are the settings:

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 3 years ago in reply to Harald Dunkel

Hi Harald Dunkel,

Thanks for the update.

I'd advise you to run a packet capture on UTM on that destination NTP server IP address to see the actual source of the traffic.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Harald Dunkel over 3 years ago in reply to FormerMember

the source IP is the same as the "Initiator IP" in the first screenshot -> it is the same under every black line. I just didn't want to post details about our internal network structure here.

There are no other network interfaces in this tranfer network - only the external interface from the Sophos and a interface of our internet facing firewall. So I am pretty sure that the origin is the Sophos
Cancel
Vote Up 0 Vote Down

Cancel