Open port

[seanmccoy]

I need to create security rule and/or not to allow port 6965 to a device. Do I need both a NAT and security rule? Need to find out from vendor if port is TCP, UDP or both. I have PA-3020 running PAN-OS 8.0.13.

[Brandon_Wertz · Accepted solution]

NAT is only necessary depending on your use case.  NAT itself isn't needed to allow access to a host over a specific port.  It's likely just the security rule you need.

[jeremy.larsen]

It sounds like you have an inbound service on port 6965 you want to block?  You can do this on a PAN but... if you want to do it the PAN way, you need to figure out what application is actually talking.  This way you can deny based on user/application and not port/protocol.  Of course not all apps will be recognized.  In this case you could make a special rule and use the "service" field in a policy rule to filter out port 6965.

[seanmccoy]

i actually need to open port 6965 to ATM machine at a yet to be determined IP address. I need to find out from the vendor what app is actually talking (if there is one).