firewall blocks ephemeral ports https://xxxx.xxxx.com:7667

[Team_IT]

Hi, 

Some of our users are trying to download a pdf from a site which uses the following port 

https://xxxx.xxxx.com:7667

We have a rule, which I believed worked, but now seems to block 

TCP Service 

Protocol HTTPS

Match by Customize 7667 (TCP)

Is this the correct way of doing things ?

Logs show CPEarlyDrop 

Or is there a better way of doing this ?

Thanks

Mike

[_Val_]

Can you show how the drop log looks like?

[_Val_ · Accepted solution]

Also, did you look into sk111643 yet?

[Team_IT]

Thanks, we sorted it this morning , it was the position of the FW rule in the end. 

Regards

Mike

[_Val_]

Great to know!