"You need the
firewall for Application and Device Control to work. If it's disabled it won't function".
Where I think what you meant to say is:
"You need
Network Threat Protection for Application and Device Control to work. If it's disabled it won't function".
Which is what I was saying...
You NEED NTP but not necessarily Firewall component...