topic Re: Cisco IP Any Migration in General Topics

Cisco IP Any Migration

amansour — Thu, 07 Mar 2013 20:32:29 GMT

Hi All; Just double checking if the service set to TCP and UDP would cover the Cisco "IP" on rule conversions.

Re: Cisco IP Any Migration

Abs — Thu, 07 Mar 2013 20:34:38 GMT

Hi Adam,

By default, the ANY service of the firewall covers all TCP and UDP ports. No need to create a new service for this.

(now shamelessly accepting the next 48 friend requests.)

Re: Cisco IP Any Migration

rmonvon — Thu, 07 Mar 2013 20:38:05 GMT

Hi..You will need to use application to match on IP protocol traffic. For example to match on IP protocol 97 (Ethernet-within-IP Encapsulation), you will choose app=etherip and leave service=any. Thanks.

Re: Cisco IP Any Migration

amansour — Thu, 07 Mar 2013 20:39:48 GMT

Thanks, there is an application and the services are ports for TCP/UDP. I left the application as any though.

Re: Cisco IP Any Migration

Abs — Thu, 07 Mar 2013 23:23:29 GMT

For other protocols that Cisco uses (such as GRE, and ICMP) you'll need to use Applications. For IP, setting the service to Any is enough.