 Re: Port Address Translation-
You can't use source port on the NAT rules, there is only destination port.
Also I don't see how NAT would create issues with windows time.
In a normal config you allow your DC to go out with the time services and get your workstations to get time from the DC.
DC should connect out behind "NAT hided" on the firewall. |