Application vs Service

cancel
Showing results for 
Search instead for 
Did you mean: 

Application vs Service

L2 Linker

I have a server that I can create a rule with Applications (e.g web-browsing, ssl), but I also need to open up specific ports (e.g udp-20).  Do I need to create 2 separate rules (ie are the Application/Service fields an "and") or can I use 1 rule (Application/Service fields are "or").  Right now, I have one policy, but the traffic is still being blocked and the Monitor is giving me "not-applicable" for the Application (specifically, the application is icmp and yes, I have icmp listed as an Application).

The new policy isn't the one Monitor is flagging the traffic as not-applicable.  The new policy is rule470 but Monitor is saying icmp is being blocked at rule269.  Rule269 is my LAST policy.  rule470 allows icmp and ping as well as some services.

2 REPLIES 2

Cyber Elite
Cyber Elite

Hi

the application and service field share an "and" relationship

you can add an application and then set the service to limit for example http to only port 80 (preventing http over 8080 and other ports)

in your example you should create 2 rules, one for the applications, and one for the service

traffic categorised as not-applicable is not categorised because it is dropped due to it not hitting an allow rule

Tom Piens
PANgurus

Thank you.  I'm breaking them out now.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!