Adding or editing protocol identifiers

Use the Filter Components > Edit Protocols > Add Protocol Identifier page to define additional protocol identifiers for an existing custom protocol. Use the Edit Protocol Identifier page to make changes to a previously-defined identifier.

Before creating or changing an identifier, verify that the correct protocol name appears next to Selected Protocol.

When working with protocol identifiers, remember that at least one criterion (port, IP address or transport type) must be unique for each protocol.

Steps

  1. Specify which Ports are included in this identifier.
    • If you select All Ports, that criterion overlaps with other ports or IP addresses entered in other protocol definitions.
    • Port ranges are not considered unique if they overlap. For example, the port range 80-6000 overlaps with the range 4000-9000.
    • Use caution when defining a protocol on port 80 or 8080. Network Agent listens for Internet requests over these ports.

    You can configure Network Agent to ignore these ports in a Forcepoint Web Security deployment.

    Since custom protocols take precedence over web protection protocols, if you define a custom protocol using port 80, all other protocols that use port 80 are filtered and logged like the custom protocol.

  2. Specify which IP Addresses are included in this identifier.
    • If you select All external IP addresses, that criterion overlaps with any other IP addresses entered in other protocol definitions.
    • IP address ranges are not considered unique if they overlap.
  3. Specify which Protocol Transport method is included in this identifier.
  4. Click OK to cache your changes and return to the Edit Protocols page. Changes are not implemented until you click Save and Deploy.