Allowing port Range

Hi Tal,

Refer to How to DNAT to an internal server and configure a DNAT policy and while choosing Port Type, select "range" which will suffice your required setup.

Cheers-

How would this work in V17, there is no longer port mapping type?

Hey SophosNewby 

You would create this port range as a service object by specifying the range inside the definition.
Please see the screenshot below, I have created a service object defining the destination ports "48129 to 48137".
Let me know if this helps.



Regards,

FloSupport | Community Support Engineer

Oh really, that is a unique way, always thought source and destination ports had to match, I have so much to learn.  Thank you FloSupport.

Would it be more secure if you had both Source and Destination ports match the range?

Hi,

There would be no difference in security.

Regards, Ronak.

Thank you again Ronak, appreciate your comments.