topic Re: how to make my own &quot;application&quot; - ssl on port 5061 in General Topics https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45358#M33336 <HTML><HEAD></HEAD><BODY><P>oki so</P><P>1 x policy with app = ssl, service = tcp5061</P><P>1 x policy with app = web-browsing, service = application-defaults</P><P></P><P>Thx</P></BODY></HTML> Thu, 22 Dec 2011 14:34:17 GMT FlexyZ 2011-12-22T14:34:17Z how to make my own "application" - ssl on port 5061 https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45354#M33332 <HTML><HEAD></HEAD><BODY><P>Hi</P><P></P><P>I am trying to grant access to Microsoft Messanger, and it is using ssl on port 5061, but I am not sure how to add the port so that it is not just the port but also signatured as SSL.</P><P></P><P>Thanks</P></BODY></HTML> Thu, 22 Dec 2011 10:54:07 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45354#M33332 FlexyZ 2011-12-22T10:54:07Z Re: how to make my own "application" - ssl on port 5061 https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45355#M33333 <HTML><HEAD></HEAD><BODY><P>You can make a policy that allows SSL, and create a new service (port) for TCP/5061. That way it will only allow SSL over TCP/5601.</P></BODY></HTML> Thu, 22 Dec 2011 14:14:51 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45355#M33333 mharding 2011-12-22T14:14:51Z Re: how to make my own "application" - ssl on port 5061 https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45356#M33334 <HTML><HEAD></HEAD><BODY><P>so create a policy with</P><P></P><P>application = ssl</P><P>service = own custom service = TCP/5061</P><P></P><P>and can I also add "application-defaults" if I have other applications like "ping, web-browsing"?</P></BODY></HTML> Thu, 22 Dec 2011 14:23:25 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45356#M33334 FlexyZ 2011-12-22T14:23:25Z Re: how to make my own "application" - ssl on port 5061 https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45357#M33335 <HTML><HEAD></HEAD><BODY><P>No, you'll have to create a seperate policy for the SSL traffic, otherwise web-browsing will only be allowed on TCP/5601.</P><P></P><P>Message was edited by: umphmharding</P></BODY></HTML> Thu, 22 Dec 2011 14:25:19 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45357#M33335 mharding 2011-12-22T14:25:19Z Re: how to make my own "application" - ssl on port 5061 https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45358#M33336 <HTML><HEAD></HEAD><BODY><P>oki so</P><P>1 x policy with app = ssl, service = tcp5061</P><P>1 x policy with app = web-browsing, service = application-defaults</P><P></P><P>Thx</P></BODY></HTML> Thu, 22 Dec 2011 14:34:17 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45358#M33336 FlexyZ 2011-12-22T14:34:17Z Re: how to make my own "application" - ssl on port 5061 https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45359#M33337 <HTML><HEAD></HEAD><BODY><P>You could also configure an Application Override policy. Multiple ways to do it. </P><P></P><P><A __default_attr="1071" __jive_macro_name="document" class="jive_macro jive_macro_document default_title"></A></P></BODY></HTML> Thu, 22 Dec 2011 14:39:51 GMT https://live.paloaltonetworks.com/t5/general-topics/how-to-make-my-own-quot-application-quot-ssl-on-port-5061/m-p/45359#M33337 mharding 2011-12-22T14:39:51Z