Skip to main content
sonydarrel
sonydarrel
New Member
April 15, 2017
Question

Policy Creation

  • April 15, 2017
  • 7 replies
  • 8255 views

I want to create a policy in which i want to specify the source port keeping a destionatin port for full open, is it possible becz when i click save it prompts me to enter the destination port.

 

thanks

    7 replies

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    April 17, 2017

    Sorry, I don't understand what your goal is. Can you please rephrase what 'keeping a destination port for full open' means, and what your policy looks like at the moment?

    MikePruett
    MikePruett
    New Member
    April 17, 2017

    Is this an incoming policy or outgoing policy? I'm with EDE on being confused. I have ideas on what you mean if this is a incoming policy but even though we definitely need more info.

    sonydarrel
    sonydarrelAuthor
    New Member
    April 18, 2017

    Dears,

    it is an incoming policy to explore more

     

    source A from Interface A wants to reach to source B on interface B , the destination services for source B can be any  ( all services opens) but the source A which is coming from interface A should be match ip address  and services (8226 ) both

     

    thanks

    pyy
    pyy
    New Member
    April 19, 2017

    Hi ,

    yes you can!

    Create a new service object and specify as destination low=1 high 65535 and as a source the port that you want.

     

    config firewall service custom     edit "test"         set tcp-portrange 1-65535 45500     next end

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!