Define the range of ports used when overriding an URL

migration · ‎02-22-2011

Hello world,

has anybody come accross a solution, when the PA is "overriding" an URL, it uses a technique of changing the dest port of the original request.

As I'm using a proxy infront of the PA, he clains that the port this request uses now, is not one of the allowed ones.

squid -> tcp_denied

No problem of changing this port into the secure ports, but with the next user and the next request, it changes. 😕

Is there any chance of limiting the range of the used ports so I can tell my proxy to allow a certain amount of ports?

Any help would be great.

Thanks a lot

cheers

Marcus

wtam608 · ‎02-23-2011

Marcus,

We do not have the ability to define port usage for NAT. We can configure a NAT IP Pool but not a pool of ports.

Steve Krall

migration · ‎02-24-2011

Hello Steve,

thanks a lot for that quick answer. It didn't solve the problem, but at least I know which way not to take. 🙂

Cheers

Marcus