Palo Alto panos-global-protect include port 4443

JiaXiang — Mon, 13 Feb 2023 08:19:57 GMT

I have configure a security policy for global protect access.

the security policy I added below app-id

panos-global-protect

panos-web-interface

SSL

From my traffic log I can see my firewall is allow port 4443 traffic for this security rules. From Application Research Center

I search this few port is only allow port 80 and port 443. Why my security policy will allow for port 4443 ?

Re: Palo Alto panos-global-protect include port 4443

Metgatz — Tue, 14 Feb 2023 00:31:26 GMT

Hello @JiaXiang

When you enable GP in your External Interfaces and in the same Interfaces you allow the admin access, the Firewall automatically allow the admin acces with the port "tcp/4443"

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm8SCAS

Cheers

topic Re: Palo Alto panos-global-protect include port 4443 in GlobalProtect Discussions

Palo Alto panos-global-protect include port 4443

Re: Palo Alto panos-global-protect include port 4443