Define the range of ports used when overriding an URL

[migration]

Hello world,

has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.

As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not one of the allowed ones.

squid -> tcp_denied

No problem of changing this port into the secure ports, but with the next user and the next request, it changes.  😕

Is there any chance of limiting the range of the used ports so I can tell my proxy to allow a certain amount of ports?

Any help would be great.

Thanks a lot

cheers

Marcus

[wtam608]

Marcus,

We do not have the ability to define port usage for NAT. We can configure a NAT IP Pool but not a pool of ports.

Steve Krall

[migration]

Hello Steve,

thanks a lot for that quick answer. It didn't solve the problem, but at least I know which way not to take.  🙂

Cheers

Marcus