topic STUN Application in General Topics

STUN Application

E.Hartmann — Thu, 01 Aug 2024 12:56:35 GMT

Howdy Folks,

Trying to learn more about the STUN application. Wondering if any other enterprises are allowing this application. I know the applipedia says its not high risk but it also seems like it uses a variety of ports. Don't know much about it but in this case I can make a rule based on destination and Application/protocol.

Thanks,

Erich

Re: STUN Application

Alejandro_Hernandez — Thu, 01 Aug 2024 14:30:03 GMT

Hi @E.Hartmann

You will keep using the stun application, rembember App-ID is a signature, so is based in protocol, ports, behavior

So the stun used tcp and udp protocol over port number 3478

In your security rule use application: stun, Service: application-default and define the specific source and destination that you want to use this application