03-21-2011 09:32 AM
I have a server that I can create a rule with Applications (e.g web-browsing, ssl), but I also need to open up specific ports (e.g udp-20). Do I need to create 2 separate rules (ie are the Application/Service fields an "and") or can I use 1 rule (Application/Service fields are "or"). Right now, I have one policy, but the traffic is still being blocked and the Monitor is giving me "not-applicable" for the Application (specifically, the application is icmp and yes, I have icmp listed as an Application).
The new policy isn't the one Monitor is flagging the traffic as not-applicable. The new policy is rule470 but Monitor is saying icmp is being blocked at rule269. Rule269 is my LAST policy. rule470 allows icmp and ping as well as some services.
03-21-2011 10:04 AM
Hi
the application and service field share an "and" relationship
you can add an application and then set the service to limit for example http to only port 80 (preventing http over 8080 and other ports)
in your example you should create 2 rules, one for the applications, and one for the service
traffic categorised as not-applicable is not categorised because it is dropped due to it not hitting an allow rule
03-21-2011 10:50 AM
Thank you. I'm breaking them out now.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
