topic Re: firewall blocks ephemeral ports https://xxxx.xxxx.com:7667 in Firewall and Security Management

firewall blocks ephemeral ports https://xxxx.xxxx.com:7667

Team_IT — Tue, 10 May 2022 11:32:28 GMT

Hi,

Some of our users are trying to download a pdf from a site which uses the following port

We have a rule, which I believed worked, but now seems to block

TCP Service

Protocol HTTPS

Match by Customize 7667 (TCP)

Is this the correct way of doing things ?

Logs show CPEarlyDrop

Or is there a better way of doing this ?

Thanks

Mike

_Val_ — Tue, 10 May 2022 13:18:03 GMT

Can you show how the drop log looks like?

_Val_ — Tue, 10 May 2022 13:20:56 GMT

Also, did you look into sk111643 yet?

Team_IT — Wed, 11 May 2022 09:24:10 GMT

Thanks, we sorted it this morning , it was the position of the FW rule in the end.

Regards

Mike

_Val_ — Wed, 11 May 2022 10:16:48 GMT

Great to know!