topic Policy clarification for NTP in Next-Generation Firewall Discussions

Policy clarification for NTP

ciscojuniperf5 — Mon, 13 Jan 2025 14:48:48 GMT

I have a policy configured on Palo Alto firewall with source as subnet 10.140.12.0/24 and destination as 10.140.13.0/24 with service as any and application has only icmp and ping.

Will NTP be allowed from 10.140.12.0/24 to 10.140.13.0/24 as the service is any or will it be blocked as application allowed is only icmp and ping

Re: Policy clarification for NTP

mshekh — Mon, 13 Jan 2025 15:39:12 GMT

Hi @ciscojuniperf5 ,

If you have selected the application icmp and ping then NTP traffic will not pass through with the policy as application will not match with existing configured policy.

Best Regards,

Mohammad Talib