Hello Keny,

Thanks for quick responce.

The thing i tried to aske, in the last part was a theoretic question of what if both Interconnects fail then a failover is not enough.

if you have a 90% chance of one InterConnect halt or reboot. then there would be 80% chance or risk of having both down at the same time.

if both are in SYNC NTP then there is nothing to failover to.

The very last part i asked if there would be a more easy way to cut off NTP trafic (port 123) in a FW and disable NTP master in local LAN/DC.

And then reenable it again the 1 of July.

This is less of a config job and i think the result would be the same.

-CH