STUN Application

[E.Hartmann]

Howdy Folks, 

Trying to learn more about the STUN application. Wondering if any other enterprises are allowing this application.  I know the applipedia says its not high risk but it also seems like it uses a variety of ports. Don't know much about it but in this case I can make a rule based on destination and Application/protocol. 

Thanks, 

Erich

[Alejandro_Hernandez]

Hi @E.Hartmann 

You will keep using the stun application, rembember App-ID is a signature, so is based in protocol, ports, behavior

So the stun used tcp and udp protocol over port number 3478

In your security rule use application: stun, Service: application-default and define the specific source and destination that you want to use this application