RPC Service

[netcomsupp]

hello everybody,

I need to write a rule that allows RPC Service activity for SUN SNMP to DMI mapper daemon.

any idea?

thanks in advance.

[rmonvon]

Hi...You can run a report on the traffic between the src/dst IPs and TCP/UDP ports to see what applications are detected.  Then define the rule to match those apps that you wish to block/permit.  If the app is unknown, you can use app-override to map the traffic to an app or write a custom app with signatures for the traffic.  Hope this helps.

[UhMayYeah]

Add a security-rule between source and destination for app-any and service any.

As advised by   Monitor the Traffic logs for all the traffic matching the above rule and tighten the rule for identified apps and services (ports).

[VinceM]

Hi

Need to do something similar couple of time ago and this doc help:https://live.paloaltonetworks.com/docs/DOC-3260

V.