topic Re: Define the range of ports used when overriding an URL in General Topics

Define the range of ports used when overriding an URL

migration — Tue, 22 Feb 2011 16:12:12 GMT

Hello world,

has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.

As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not one of the allowed ones.

squid -> tcp_denied

No problem of changing this port into the secure ports, but with the next user and the next request, it changes. 😕

Is there any chance of limiting the range of the used ports so I can tell my proxy to allow a certain amount of ports?

Any help would be great.

Thanks a lot

cheers

Marcus

wtam608 — Wed, 23 Feb 2011 19:42:58 GMT

Marcus,

We do not have the ability to define port usage for NAT. We can configure a NAT IP Pool but not a pool of ports.

Steve Krall

migration — Thu, 24 Feb 2011 08:25:19 GMT

Hello Steve,

thanks a lot for that quick answer. It didn't solve the problem, but at least I know which way not to take. 🙂

Cheers

Marcus