This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- Tools
- Expedition
- Expedition Discussions
- Who Me Too'd this topic
Who Me Too'd this topic
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
11-05-2018 08:34 PM
Noticed that many rules with source ports defined are not migrated over.
Instead, it creates a service only for the destination port/range and allows all ports through.
Below are a few rules. Is it a known behavior?
The first two allowed all udp and tcp ports > 1023
The third rule allowed all TCP ports
access-list OUT2IN extended permit udp any4 eq domain any4 gt 1023
access-list OUT2IN extended permit tcp any4 eq ftp-data any4 gt 1023
access-list OUT2IN extended permit tcp any4 eq ftp-data any4
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks