topic Basic question regarding policy in General Topics

Basic question regarding policy

Shadow — Fri, 02 Dec 2022 20:28:59 GMT

Just trying to understand the policy a bit more.

under the policy | application, if I select FTP and select http/s under the service, I assume fw is expecting FTP to run on port 80/443?

hence, if I select app default on services, it will then expect the ftp traffic on port 21?

what I was looking into allow ftp/http/s. I end up creating 2 policies for this, 1. with http/s under services without applications selected

2. application selected ftp and under services, I chose app default.

I guess my thinking is ok?

thank a lot

Re: Basic question regarding policy

OtakarKlier — Fri, 02 Dec 2022 20:56:04 GMT

Hello,

You logic is sound with regards to the Applications and Services (ports). You can do it with two policies or with one:

1. Select FTP as application and http/https as services ( this will allow the FTP application over ports 80,443), then second policy as FTP application and services as application default.

2. Select FTP as the application, then http/https and port 21 as a service, ( cant recall if there is a 21 by default, so you might have to add it)

Your choice.

Re: Basic question regarding policy

Shadow — Mon, 05 Dec 2022 18:57:09 GMT

Thak you Otakarklier, can you also explain the relationship between "application & Service/URL"

if I select Application = > "any" and select Service/URL => http/https, my traffic seems to drop to google or Facebook.

if I add web-browsing under the application, this will not work either, only if I select addplication-default under Service/URL

what I am trying to get done is to allow http/https from inside to outside. but it needs to be http/https using browser others get blocked

any idea how to achieve this without using "any" in the rule set

much appreciated

Re: Basic question regarding policy

Shadow — Mon, 05 Dec 2022 20:43:58 GMT

Ignore the above pls, I just forgot to allow DNS 🙂