What is the best way for me to implement a rule that allows http traffic over non standard ports?
Our security standards require that we use a feature similar to what is available in Checkpoint that allows us to lock the port down based on protocol. Ex: port 55000 is open and allowed assuming the traffic is http or https.
Any help would be appreciated.
Solved! Go to Solution.
When creating security rules, in the Application section configure: Web Browsing but in the Service section refer to the ports you are interested in allowing.
You may have to create a custom service and allow these non standard ports and then call that custom service in the security rule (where it says service). That way when traffic is checked against the security rule, you'd have web browsing AND the port (allowed via service) and only if the two web browsing on that non standard port match, will the traffic be allowed
So e.g. your service would look like
Where service-http goes to 80 and 8080
and the security policy would be:
I goofed around a bit and figured this was the way to do it, but thank you very much for the response.
Nice to have someone confirm my thoughts.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!