- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
08-28-2013 01:56 PM
What is the best way for me to implement a rule that allows http traffic over non standard ports?
Our security standards require that we use a feature similar to what is available in Checkpoint that allows us to lock the port down based on protocol. Ex: port 55000 is open and allowed assuming the traffic is http or https.
Any help would be appreciated.
08-28-2013 02:23 PM
I would suggest you to set the application as any and service port as the non-standard port that you use. Once the traffic traverses the firewall the application would show up and then you can modify the rule to incorporate it.
08-28-2013 02:22 PM
When creating security rules, in the Application section configure: Web Browsing but in the Service section refer to the ports you are interested in allowing.
You may have to create a custom service and allow these non standard ports and then call that custom service in the security rule (where it says service). That way when traffic is checked against the security rule, you'd have web browsing AND the port (allowed via service) and only if the two web browsing on that non standard port match, will the traffic be allowed
So e.g. your service would look like
Where service-http goes to 80 and 8080
and the security policy would be:
08-28-2013 02:23 PM
I would suggest you to set the application as any and service port as the non-standard port that you use. Once the traffic traverses the firewall the application would show up and then you can modify the rule to incorporate it.
08-29-2013 07:21 AM
I goofed around a bit and figured this was the way to do it, but thank you very much for the response.
Nice to have someone confirm my thoughts.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!