About Karkerachethan

Hi Experts ,    We have existing rule for "Syslog" application ,our current security polcy with App-id and services configured as below ,   Application - "Syslog" ( default application which allows TCP 1468,  TCP 1514, TCP 6514, UDP 514 and UDP 1514 )  Service        -  "application-default"   Now we have a requirement to additionally add TCP-514 and UDP-6514 to this rule .   So my question here is do I need to only add TCP-514 and UDP-6514 under services instead of application-default and this means  you only need to add the ports to the service group that are not covered under the default app port list .  or    I need to add (TCP 1468,  TCP 1514, TCP 6514, UDP 514 and UDP 1514)   + additional 2 ports TCP-514 & UDP-6514 ?   How this will work . Can someone please explain me .    Note : I don't want to allow "Any" port - We need more secure option for achieving the end goal by adding the the required services in the Service field rather than using Any.   Regards ,  Chethan      ... View more