topic Re: URL with port in General Topics

URL with port

FW_Newb — Wed, 27 Oct 2021 18:04:48 GMT

Hi,

Wondering if someone can help me out. I've done some searching and have not come up with with much

I have a user who needs to access a few webpages on a custom port. The link for example is something like: https://custom1.config.fake:2546/info but there are a few more like https://custom2.config.fake:2546/info , and https://custom3.config.fake:2546/info . To make matters worse, they change can change the prefix at any time, and have a new public IP, so in a months or so https://custom4.config.fake:2546/info might go live and be required to be open which would be coming from a different public IP.

What is the best way to allow and internal user at a specific IP to access these websites on the internet which have the port in the link and changing prefixes?

Thank you kindly

Re: URL with port

ktunkel77 — Wed, 27 Oct 2021 20:14:45 GMT

It's messy, but if you don't know a range of ports that these websites will confine themselves to, your best bet may be to create a policy that allows web browsing for this user and SSL, but set the service to any versus specifying "application default" or creating a service group. You could then create a url filtering custom category with the sites you want to allow, using wildcards as needed.

Re: URL with port

FW_Newb — Wed, 27 Oct 2021 20:27:34 GMT

Thank you for the response.
As of right now the port stays the same, it's the prefix in the URL that
will change.

So would I then create a rule from source IP, to destination Internet with
any IP, set the SSL application and specify the port, then apply a URL
category with the wildcard URL *.config.fake?

Re: URL with port

ktunkel77 — Wed, 27 Oct 2021 22:27:07 GMT

Yes! A custom url filter on the wildcard url for each site should do the
trick.