application any and service application default in policy

[hbshin]

Hello,

i have a question about policy

if i configure application - any & service - application default in security policy

how does it work?

is it the same as application any & service any?

Thanks.

[Remo · Accepted solution]

Hi @hbshin

Service: any; Application: application-default

This will allow any application but only on their default ports. For example if the firewall sees 'ssl' it is only allowed on port 443/tcp.

Service:any; Application: any

This will allow absolutely any, so compared to application-default 'ssl' is allowed on any port for example.

Hope this helps 

[Z_Ahmad]

but why is policy denied Ssl traffic if i am allowing SSL port with Application-default in server tab ?

can you please explain and advise on this issue ?

Regards,

Zahoor Ahmad

[reaper]

@Z_Ahmad  check what the destination port is, it seems you may be blocking a session because it is not using 443