Webbrowsing on non-standard http ports....

Reply
Not applicable

Webbrowsing on non-standard http ports....

What is the best way for me to implement a rule that allows http traffic over non standard ports?

Our security standards require that we use a feature similar to what is available in Checkpoint that allows us to lock the port down based on protocol. Ex: port 55000 is open and allowed assuming the traffic is http or https.

Any help would be appreciated.

Highlighted
L4 Transporter

Re: Webbrowsing on non-standard http ports....

When creating security rules, in the Application section configure: Web Browsing but in the Service section refer to the ports you are interested in allowing.

You may have to create a custom service and allow these non standard ports and then call that custom service in the security rule (where it says service). That way when traffic is checked against the security rule, you'd have web browsing AND the port (allowed via service) and only if the two web browsing on that non standard port match, will the traffic be allowed

So e.g.  your service would look like

services.PNG.png

Where service-http goes to 80 and 8080

and the security policy would be:

security.PNG.png

L5 Sessionator

Re: Webbrowsing on non-standard http ports....

I would suggest you to set the application as any and service port as the non-standard port that you use. Once the traffic traverses the firewall the application would show up and then you can modify the rule to incorporate it.

Not applicable

Re: Webbrowsing on non-standard http ports....

I goofed around a bit and figured this was the way to do it, but thank you very much for the response.

Nice to have someone confirm my thoughts.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!