replace ACL rules when moving from ASA to XG

Hi

You should use firewall rules (is the same as the ACL list in Cisco). 

Create a firewall rule, using the zone (where the source are) Network should be the source IP-address, Dest zone where the destination is, Network where is the destionation IP and Port is the port you would like to access

Hi RickardNordahl

Thanks for answering ...I tried that but as i mentioned before in the example

access-list acl-test extended permit tcp host X.X.X.X range 2014 65535 host Y.Y.Y.Y eq 13721

I need to specify ports on both IPs X.X.X.X (2014 to 65535) and Y.Y.Y.Y (13721)

The service section in the firewall rule means the services I want to access in the destination, unless I'm mistaken.

so is there any way to do that?

When you create the Service in Destination you specify the source ports as well as seen below. So if you need to use a specific source port and the service exist (http for example) you create a new one an specify the source ports as well.

//Rickard

Perfect. Thanks

Perfect. Thanks

No problem.

Good Luck.

//Rickard