07-22-2011 02:54 AM
I'm considering to create a policy for Internet access to replace traditional Internet rule (i.e. outbound 80/tcp or any other ports raised by user per special request). To minimize future special request by user, I prefer to allow any ports if app-id identified the traffic as "browser-based apps". Would it be too risky to enable such rule (provided that antivirus, antispyware and vulnerability protection profiles are all turned on with URL filtering)?
Thank you.
07-22-2011 04:37 AM
Hi,
There is no absolute good answer about this. Security mongers will scream about this heresy while bored admin will say 'who cares if no virus comes in?'
I opened broswer-based on 80,443,8080,8443,81 and it suits 99% of user needs.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
