diff --git a/bash/esxi_ks_injector/KS-TEMPLATE.CFG b/bash/esxi_ks_injector/KS-TEMPLATE.CFG
index fa7baef..72f2611 100644
--- a/bash/esxi_ks_injector/KS-TEMPLATE.CFG
+++ b/bash/esxi_ks_injector/KS-TEMPLATE.CFG
@@ -22,4 +22,5 @@ esxcli system settings advanced set -o /UserVars/SuppressShellWarning -i 1
 
 # NTP
 esxcli system ntp set -s de.pool.ntp.org
+esxcli network firewall ruleset set --ruleset-id "ntpClient" --enabled=true
 esxcli system ntp set -e 1