Best way to add application

[Alex_Samad]

Hi

I want to give my users access to bitbucket via ssh.

This is provided on port 7999.

So 2 ways I think i can do this.

create a service TCP-7999 Bitbucket

add policy with application ssh and service TCP-7999

or

I can create a custom applicaiton on port 7999.  then i have to do a applicaiton override.

so which is the better way , I am thinking the first as I get the ssh inspection !

A

[Raido_Rattameister]

First option sounds better.

Application override stops data processing at Layer 4 and does not go to Layer 7.

[reaper]

I concur with @Raido_Rattameister: option 1 is the better choice as it allows you ssh decryption and inspection, option2 will prevent that