Evaluating- Secondary TCP/UDP connections

[cnelson]

Having some trouble finding a way to enable the use of secondary tcp/udp connections for a rule.  For example, in our current FW I can configure a rule with a UDP primary connection with a range of ports using Receive/Send, then set it up for a UDP secondary connection with the same ports only with Send/Recieve.

How can I do this in PAN?

Thanks!

[acamacho]

I think this is what you want to do.

Create two rules.

1. Rule 1 - trust to untrust with service (UDP )

2. Rule 2 - untrust to trust with service (UDP )

<<Picture (Device Independent Bitmap)

[cnelson]

So, this would require Two rules to accomplish this?  Bummer.

[mjacobsen]

What is the application you are trying to allow through the firewall? In some cases, the response traffic will automatically be correlated to the request and allowed as needed.

Mike

[cnelson]

It is not so much an application, as it is an HVAC system that is controlled via TCP/IP.  The system uses a pair of ports over UDP.  The primary UDP connection to it starts with send/receive and switches to receive/send as a secondary connection.  We are evaluating a unit for possible purchase so I am trying to find things our current FW is doing and seeing how to configure the PAN to do the same thing.

Current FW can, in a single rule, use both primary and secondary connections.

I have lots of other questions about the pan.  Would you be the one to which to bounce them off?