topic Re: allow website with non standard port in General Topics

allow website with non standard port

amna02rs — Thu, 26 Aug 2021 06:48:40 GMT

i have to allow a specific website with non standard port , but already have policy allowed "any" services . still the cannot open the page and incomplete app type in the traffic

Re: allow website with non standard port

batd2 — Thu, 26 Aug 2021 08:29:18 GMT

@amna02rs Can you share traffic log for the failing connection and if possible the policy configuration?

Re: allow website with non standard port

LAYER_8 — Thu, 26 Aug 2021 16:35:57 GMT

If the app type is incomplete then the traffic is touching a different rule, as there isn't enough traffic to make an identification before it's dropped or the session is killed.

Are you blocking the app QUIC at the top of your rule hierarchy? You may want to consider that, as it sometimes muddles App-ID from time to time for web browsing traffic.