However, on a Windows host platform, in addition to configuring NTP using Windows native tools, typically you need to make the necessary firewall exception or “iptable” entry to allow UDP port 123 traffic. Otherwise, NTP time synchronization can fail because of firewall-blocked messages.