topic Re: Open port in General Topics

Open port

seanmccoy — Thu, 28 Mar 2019 17:14:11 GMT

I need to create security rule and/or not to allow port 6965 to a device. Do I need both a NAT and security rule? Need to find out from vendor if port is TCP, UDP or both. I have PA-3020 running PAN-OS 8.0.13.

Re: Open port

Brandon_Wertz — Thu, 28 Mar 2019 17:44:10 GMT

NAT is only necessary depending on your use case. NAT itself isn't needed to allow access to a host over a specific port. It's likely just the security rule you need.

Re: Open port

jeremy.larsen — Thu, 28 Mar 2019 19:53:03 GMT

It sounds like you have an inbound service on port 6965 you want to block? You can do this on a PAN but... if you want to do it the PAN way, you need to figure out what application is actually talking. This way you can deny based on user/application and not port/protocol. Of course not all apps will be recognized. In this case you could make a special rule and use the "service" field in a policy rule to filter out port 6965.

Re: Open port

seanmccoy — Thu, 28 Mar 2019 20:09:40 GMT

i actually need to open port 6965 to ATM machine at a yet to be determined IP address. I need to find out from the vendor what app is actually talking (if there is one).