create a new TCP port - tanzu IPS

[Daniel_Kavan]

Hi All,

We are putting in a new load balancer that will use a random port instead of port 80.  This will be HTTP traffic.    If I create a new TCP service and manually define the protocol to be http, can I assume the IPS will inspect it like it does for http?  Or is there an additional step?   IOW,  say I add TCP port A.54435  and specify protocol http, is that it or do I need to add it some where for the IPS to inspect/defend it?

Update: this is working!  

[Timothy_Hall · Accepted solution]

That sounds correct, although you may want to also add this nonstandard HTTP port to the "Application Control Web Browsing Services" on the Manage & Settings...Blades...Application Control & URL Filtering...Advanced screen.  I don't believe this additional step would be necessary for proper IPS inspection of HTTP on a nonstandard port, but it may help with some of the other blades.

Also definitely ensure that the "Enable HTTP inspection on non standard ports for Threat Prevention blades" checkbox is set under Manage & Settings...Threat Prevention...Advanced Settings...General...HTTP Inspection and you should be good to go.