topic How to Change the Default Service TCP Port in General Topics

How to Change the Default Service TCP Port

j.silva — Tue, 06 Sep 2016 20:52:25 GMT

Greetings,

Is there anyway to change the default TCP port that an interface uses for HTTPS or SSH management service?

For example, I am currently using the external interface to redirect port 443, via Destination NAT, service, and DST port translation, to an internal mail server. I also want to be able to manage the firewall via the same external interface IP using HTTPS, but instead of using 443, since it is already being redirected, I want to use port 444 instead. I know I can pretty much do the samething that I am doing right now for the email/443 connectivty, but I wanted to know if there was anyway to do this without having to do it via DST NAT translation for managing the firewall via HHTPS.

Alot of the other firewalls, ie ASA and Netcreen, allow this to be done via a configuration knob so I was hoping PAN now has this in 7.1 code.

Thanks in advance,

Jaime

Re: How to Change the Default Service TCP Port

TranceforLife — Tue, 06 Sep 2016 21:11:36 GMT

Hi Jaime,

Yes, it is possible. Please see below article for both HTTPS and SSH:

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Change-the-Default-Management-Port/ta-p/62333

Thx,

Myky

Re: How to Change the Default Service TCP Port

j.silva — Tue, 06 Sep 2016 22:45:07 GMT

Thanks for the reply. I was aware of the DST NAT with Port Translation as a viable option. So my assumption this the only way the default TCP port for HTTPS can be changed...Is there no other option avaialble?

Re: How to Change the Default Service TCP Port

TranceforLife — Wed, 07 Sep 2016 06:40:55 GMT

Hi,

I guess it is only the way to do it. Another discussion here:

https://live.paloaltonetworks.com/t5/General-Topics/Default-Management-Ports-in-PAN-OS-7-1/m-p/106621#M44825

Thx,

Myky