Defining custom protocols
In addition to using pre-defined protocol definitions, you can define custom protocols. Custom protocol definitions can be based on IP addresses or port numbers, and can be edited.
To block traffic over a specific port, associate that port number with a custom protocol, and then assign that protocol a default action of Block. When ports are used to define a protocol, blocking the port intercepts all Internet content entering your network over that port, regardless of source.
Note: Occasionally, internal network traffic sent over a particular port may not be blocked, even though the protocol using that port is blocked. The protocol may send data via an internal server
more quickly than Network Agent can capture and process the data. This does not occur with data originating outside the network.
To work with custom protocol definitions, go to , and then click Protocols. See Editing custom protocols and Creating a custom protocol for details.