Next gen features on port based rules

[FWPalolearner]

Hello ,

We are in process on migrating port based rules to APP -ID but as it is time taking process , it may take us sometime .

Can we still enable Security profiles like AV, Antispyware , Vul Protection , Wildfire  , Data Blocking ; URL filtering on Port based rules ?

Or is there a preq to have APP ID for these features ?

we want to start applying Security profiles with less restrictive actions , observe and then take strict actions like reset or block

Kindly reply .

Thanks

[FWPalolearner]

Anyone please ?

[reaper · Accepted solution]

hi @FWPalolearner 

yes absolutely you can enable all the security profiles on your port based rules

the content engines are smart enough to detect for themselves which protocols they can and will scan so they can be applied to anything from any any to fully set app + app-default rules and will function as expected

there is no concept of 'overscanning' like some legacy firewalls (eg. smtp signatures will not be matched if the content engine detects http) so it is perfectly safe to enable _everything_ on all rules even if there are no applications

hope this helps

[FWPalolearner]

@reaper Thanks a lot , really appreciate