Application vs Services

[KrishnanR]

Hi Team,

I have a couple of questions in application vs services.

1. I have to permit a list of services for a particular traffic. In those list some of them are already in the applications like DNS, IMAP, Pop3 and I need to create some services with custom port. Now do I add these applications and the custom services in the same rule or does it have to be in two different rules ?

2. I need to permit bitdefender/kaspersky antivirus traffic. As per the application it uses only tcp 80/443 as standard port. But I do have a list of services which has custom ports like tcp 7075. Do i need to add as a service or add as an application and give any (instead of application-default) ?

Please advise.

[KrishnanR]

But if you look at the rule which I saw in demo appliance it had ping and other applications with a custom service.

[Abdul-Fattah]

ping doesnt need a port, and for ms-rdp probably they are using NAT or even 3389 defined in same TCP4001. as i already mentinied that is how security policy in PA works.

good luck.