Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 28 subscribers
  • Views 583 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Custom Port / Application Classification

W Boyles

Hello,

I am trying to find a way to name custom ports for applications we use.  For example, one piece of software we use talks to remote endpoints on TCP Port 6180.  When viewing reports, unless that person happens to know what's on port 6180, they have no idea what they're looking at.

It would be nice to be able to define a custom Application or Port Classification which would read correctly on reports and make it much easier to quickly identify what the traffic is.

If this is already a feature then I'm missing it (nothing shocking there Slight smile) and a quick push in the right direction would be greatly appreciated.

Thanks!

Wayne.



This thread was automatically locked due to age.
  • 0

    Hello,

    This is an old feature request, I will try to find It later on Sophos Ideas - and post it in here.

    * There's supposed to be two separate feature requests:

    1. Allow Custom Port Identification on the Reporting (I believe this got denied a while ago.)
    2. Allow the creation of Custom Applications with Signatures (Also got answered, they told to use Synchronized Security with Intercept X.)

    Thanks

  • 0 in reply to Prism

    The second option appears to have a minor bug in that the bad actor gets through to the end device instead of being stopped in the firewall?

    You cannot configure intercept X on home devices so that is another failure. I also expect the same applies to small installations?

    Ian