Security Gateways and NTP - Implied rule?

[Joe_Kanaszka]

While looking at my NTP rules for a planned security gateway migration, I noticed that my security gateways are able to query the NTP servers that I have configured in their GAIA portals without an explicit rule.  When I look at the logs, they are getting out via their external interface using rule "0".  

I cannot see any implied rule allowing NTP.  Is this perhaps a side effect of my ISP Redundancy configuration?

[the_rock]

Good point brother. Let me check in my lab and see.

[Danny · Accepted solution]

The 'Accept outgoing packets originating from Gateway' setting is likely allowing the NTP queries from your gateway.

[the_rock]

Good point Danny. I checked and was unable to find anything related to NTP in the implied rules.

[Joe_Kanaszka]

Bingo!  That is checked for me as well.  Thanks Danny!