topic Re: rule any any with no security profile in General Topics

rule any any with no security profile

MP18 — Mon, 28 Jan 2019 20:02:48 GMT

need to confirm if i use rule with any any and no security profile does it do any layer 7 inspection?

is this same as app override?

Re: rule any any with no security profile

BPry — Mon, 28 Jan 2019 20:38:18 GMT

It still does layer-7 inspection and the application will still be identified. Essentially you would just be allowing any traffic and the firewall won't have any actions to take when it identifies a threat.

Re: rule any any with no security profile

Brandon_Wertz — Mon, 28 Jan 2019 20:39:54 GMT

IF you do this:

<SRC IP> any <DST IP> any <APP> any <DST PRT> any

There will be no controls around L7 enforcement. It will still identify application and ports, but shouldn't enforce any policy or control around what port an application uses.

Re: rule any any with no security profile

Raido_Rattameister — Mon, 28 Jan 2019 22:53:45 GMT

If you don't attach security profile then application is identified but traffic is not checked against threats.

Also no threat prevention logs will appear in firewall (including URL filtering) for traffic that matched this rule.

Re: rule any any with no security profile

MP18 — Tue, 29 Jan 2019 01:51:10 GMT

MAny thanks for great info

Re: rule any any with no security profile

MP18 — Tue, 29 Jan 2019 01:51:47 GMT

MAny thanks for great info.

Much appreciated answering the question