how to make my own "application" - ssl on port 5061

[FlexyZ]

Hi

I am trying to grant access to Microsoft Messanger, and it is using ssl on port 5061, but I am not sure how to add the port so that it is not just the port but also signatured as SSL.

Thanks

[mharding]

You can make a policy that allows SSL, and create a new service (port) for TCP/5061. That way it will only allow SSL over TCP/5601.

[FlexyZ]

so create a policy with

application = ssl

service = own custom service = TCP/5061

and can I also add "application-defaults" if I have other applications like "ping, web-browsing"?

[mharding]

No, you'll have to create a seperate policy for the SSL traffic, otherwise web-browsing will only be allowed on TCP/5601.

Message was edited by: umphmharding

[FlexyZ]

oki so

1 x policy with app = ssl, service = tcp5061

1 x policy with app = web-browsing, service = application-defaults

Thx

[mharding]

You could also configure an Application Override policy. Multiple ways to do it.