How to ALLOW URL using specific TCP port

Products

• SG-S400

Issue/Introduction

How to ALLOW on URL that is using different port than 443

Resolution

By default the policy will no accept HTTP CONNECT for ports other than 443, hence a policy rule will need to be added to allow the traffic

Here is CPL code to allow the traffic going to www.example.com over port 5555

<proxy>

http.method=CONNECT url.domain=www.example.com url.port=5555 ALLOW

 

Please note that port 555 will need to be allowed as well on the firewall for the traffic to go through from the proxy to the upstream.