topic Re: Best way to add application in General Topics

Best way to add application

Alex_Samad — Sun, 28 May 2017 23:55:20 GMT

I want to give my users access to bitbucket via ssh.

This is provided on port 7999.

So 2 ways I think i can do this.

create a service TCP-7999 Bitbucket

add policy with application ssh and service TCP-7999

I can create a custom applicaiton on port 7999. then i have to do a applicaiton override.

so which is the better way , I am thinking the first as I get the ssh inspection !

Raido_Rattameister — Mon, 29 May 2017 02:32:14 GMT

First option sounds better.

Application override stops data processing at Layer 4 and does not go to Layer 7.

reaper — Mon, 29 May 2017 06:31:56 GMT

I concur with @Raido_Rattameister: option 1 is the better choice as it allows you ssh decryption and inspection, option2 will prevent that