Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Daniel_Kavan
Advisor

create a new TCP port - tanzu IPS

Jump to solution

Hi All,

We are putting in a new load balancer that will use a random port instead of port 80.  This will be HTTP traffic.    If I create a new TCP service and manually define the protocol to be http, can I assume the IPS will inspect it like it does for http?  Or is there an additional step?   IOW,  say I add TCP port A.54435  and specify protocol http, is that it or do I need to add it some where for the IPS to inspect/defend it?

 

Update: this is working!  

0 Kudos
1 Solution

Accepted Solutions
Timothy_Hall
Champion
Champion

That sounds correct, although you may want to also add this nonstandard HTTP port to the "Application Control Web Browsing Services" on the Manage & Settings...Blades...Application Control & URL Filtering...Advanced screen.  I don't believe this additional step would be necessary for proper IPS inspection of HTTP on a nonstandard port, but it may help with some of the other blades.

Also definitely ensure that the "Enable HTTP inspection on non standard ports for Threat Prevention blades" checkbox is set under Manage & Settings...Threat Prevention...Advanced Settings...General...HTTP Inspection and you should be good to go.

"Max Capture: Know Your Packets" Self-Guided Video Series
available at http://www.maxpowerfirewalls.com

View solution in original post

1 Reply
Timothy_Hall
Champion
Champion

That sounds correct, although you may want to also add this nonstandard HTTP port to the "Application Control Web Browsing Services" on the Manage & Settings...Blades...Application Control & URL Filtering...Advanced screen.  I don't believe this additional step would be necessary for proper IPS inspection of HTTP on a nonstandard port, but it may help with some of the other blades.

Also definitely ensure that the "Enable HTTP inspection on non standard ports for Threat Prevention blades" checkbox is set under Manage & Settings...Threat Prevention...Advanced Settings...General...HTTP Inspection and you should be good to go.

"Max Capture: Know Your Packets" Self-Guided Video Series
available at http://www.maxpowerfirewalls.com