topic Re: Next gen features on port based rules in Next-Generation Firewall Discussions

Next gen features on port based rules

FWPalolearner — Fri, 04 Jun 2021 03:07:32 GMT

Hello ,

We are in process on migrating port based rules to APP -ID but as it is time taking process , it may take us sometime .

Can we still enable Security profiles like AV, Antispyware , Vul Protection , Wildfire , Data Blocking ; URL filtering on Port based rules ?

Or is there a preq to have APP ID for these features ?

we want to start applying Security profiles with less restrictive actions , observe and then take strict actions like reset or block

Kindly reply .

Thanks

Re: Next gen features on port based rules

FWPalolearner — Wed, 13 Jan 2021 10:52:11 GMT

Anyone please ?

Re: Next gen features on port based rules

reaper — Wed, 13 Jan 2021 13:11:29 GMT

hi @FWPalolearner

yes absolutely you can enable all the security profiles on your port based rules

the content engines are smart enough to detect for themselves which protocols they can and will scan so they can be applied to anything from any any to fully set app + app-default rules and will function as expected

there is no concept of 'overscanning' like some legacy firewalls (eg. smtp signatures will not be matched if the content engine detects http) so it is perfectly safe to enable _everything_ on all rules even if there are no applications

hope this helps

Re: Next gen features on port based rules

FWPalolearner — Wed, 13 Jan 2021 13:54:03 GMT

@reaper Thanks a lot , really appreciate