Log Servers Service Port

[ihenock101]

Dear All,

I want to make my rule bases from any-any to be specific, when I try to update the rule bases by collecting ports from the log, inserting specific service ports on the rule does not seem to work. When I make the service/Application field any, it starts working. I am very sure I collect all Service ports from the log.

I would really appreciate it if you could help me with this issue and provide me with a solution.

Thanks in advance,

[Chris_Atkinson]

Are you able to provide an example that you are trying to make work currently?

[ihenock101]

@Chris_Atkinson Apology I didn't get your point?

[Chris_Atkinson]

What communication are you having difficulty creating rules for?

[ihenock101]

Yesterday I was trying to make one of our server to be accessible from public and the service ports the server using is already known and what I got from the log is the same ports what I expect however when I add those specific ports on the service/application I couldn't access the server from public

[emmap]

Some screenshots of logs (both accept and drop, showing the ports only) and the rule you added would assist here.

[Chris_Atkinson]

How does the rule compare to what NAT you have configured if any for this host?