Policy: Firewall-VPN Last Modified: Wed Oct 27 07:28:53 2004 Global Properties Installation Targets

Type	Service	Policy Load	Specification	Properties	Comments
TCP
	AOL	Keep	Port: 5190	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	AOL Instant Messenger. Also used by: ICQ & Apple iChat
	AP-Defender	Keep	Port: 2626	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Defender Authentication service
	AT-Defender	Keep	Port: 2626	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Defender Authentication service
	Backage	Keep	Port: 411	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Backage trojan
	Bionet-Setup	Keep	Port: 5000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Blazer5 , Bubbel and Back-door trojans
	Citrix_ICA	Keep	Port: 1494	Advanced Advanced Source port: - Protocol Type: CitrixICA Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Citrix ICA general Service.
	ConnectedOnLine	Keep	Port: 16384	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster
	CPD	Keep	Port: 18191	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Daemon Protocol
	CPD_amon	Keep	Port: 18192	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Internal Application Monitoring
	CPMI	Keep	Port: 18190	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Management Interface
	CP_Exnet_PK	Keep	Port: 18262	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Extranet public key resolution
	CP_Exnet_resolve	Keep	Port: 18263	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Extranet remote objects resolution
	CP_redundant	Keep	Port: 18221	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Redundant Management Protocol
	CP_reporting	Keep	Port: 18205	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Reporting Client Protocol
	CP_rtm	Keep	Port: 18202	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Real Time Monitoring
	CP_SmartPortal	Keep	Port: 4433	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Smart Portal
	CP_SSL_Network_Extender	Keep	Port: 444	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	SSL Network Extender port
	CrackDown	Keep	Port: 4444	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	CrackDown trojan
	CreativePartnerClnt	Keep	Port: 455	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	The Client listening port
	CreativePartnerSrvr	Keep	Port: 453	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	The Server listening port
	DaCryptic	Keep	Port: 1074	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	DaCryptic trojan
	DameWare	Keep	Port: 6129	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	DameWare Mini Remote Control Protocol
	daytime-tcp	Keep	Port: 13	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Daytime Server Protocol (TCP)
	DerSphere	Keep	Port: 1000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Direct Connection,Connecter,Insane Network trojans
	DerSphere_II	Keep	Port: 2000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by:Insane Network,Last 2000,Remote Explorer 2000,Senna Spy Trojan Generator trojans
	Direct_Connect_TCP	Keep	Port: 411-412	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Direct Connect P2P application. Used also by other clients
	discard-tcp	Keep	Port: 9	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Discard Server Protocol (TCP)
	domain-tcp	Keep	Port: 53	Advanced Advanced Source port: - Protocol Type: DNS_TCP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Domain Name System Download
	echo-tcp	Keep	Port: 7	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Echo Protocol (TCP)
	eDonkey_4661	Keep	Port: 4661	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	eDonkey protocol. Used also by other clients.
	eDonkey_4662	Keep	Port: 4662	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	eDonkey protocol. Used also by other clients.
	Entrust-Admin	Keep	Port: 710	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Entrust CA Administration Service
	Entrust-KeyMgmt	Keep	Port: 709	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Entrust CA Key Management Service
	exec	Keep	Port: 512	Advanced Advanced Source port: - Protocol Type: RSHELL Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Remote execution (rexec)
	finger	Keep	Port: 79	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	UNIX, Finger Protocol
	Freak2k	Keep	Port: 7001	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Freak88,NetSnooper Gold trojans
	ftp	Keep	Port: 21	Advanced Advanced Source port: - Protocol Type: FTP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	File Transfer Protocol
	ftp-bidir	Keep	Port: 21	Advanced Advanced Source port: - Protocol Type: FTP-BIDIR Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	File Transfer Protocol with bi-directional data transfer
	ftp-pasv	Keep	Port: 21	Advanced Advanced Source port: - Protocol Type: FTP-PASV Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	File Transfer Protocol - PASV mode only
	ftp-port	Keep	Port: 21	Advanced Advanced Source port: - Protocol Type: FTP-PORT Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	File Transfer Protocol - PORT mode only
	FW1	Keep	Port: 256	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 & FireWall-1 Service
	FW1_amon	Keep	Port: 18193	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Application Monitoring
	FW1_clntauth_http	Keep	Port: 900	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 & FireWall-1 Client Authentication (HTTP)
	FW1_clntauth_telnet	Keep	Port: 259	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 & FireWall-1 Client Authentication (Telnet)
	FW1_CPRID	Keep	Port: 18208	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Remote Installation Protocol
	FW1_cvp	Keep	Port: 18181	Advanced Advanced Source port: - Protocol Type: FW1_CVP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Content Vectoring Protocol
	FW1_ela	Keep	Port: 18187	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Event Logging API
	FW1_ica_mgmt_tools	Keep	Port: 18265	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Internal CA Management Tools
	FW1_ica_pull	Keep	Port: 18210	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Internal CA Pull Certificate Service
	FW1_ica_push	Keep	Port: 18211	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Internal CA Push Certificate Service
	FW1_ica_services	Keep	Port: 18264	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Internal CA Fetch CRL and User Registration Services
	FW1_key	Keep	Port: 265	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 Public Key Transfer Protocol
	FW1_lea	Keep	Port: 18184	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Log Export API
	FW1_log	Keep	Port: 257	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 & FireWall-1 Logs
	FW1_mgmt	Keep	Port: 258	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Management (Version 4.x)
	FW1_netso	Keep	Port: 19190	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point User Authority simple protocol
	FW1_omi	Keep	Port: 18185	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Objects Management Interface
	FW1_omi-sic	Keep	Port: 18186	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Objects Management Interface with Secure Internal Communication
	FW1_pslogon	Keep	Port: 18207	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point Policy Server Logon protocol
	FW1_pslogon_NG	Keep	Port: 18231	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point NG Policy Server Logon protocol
	FW1_sam	Keep	Port: 18183	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC Suspicious Activity Monitor API
	FW1_sds_logon	Keep	Port: 18232	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point SecuRemote Distribution Server Protocol
	FW1_sds_logon_NG	Keep	Port: 65524	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	SecuRemote Distribution Server Protocol (VC and higher)
	FW1_snauth	Keep	Port: 261	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 & FireWall-1 Session Authentication
	FW1_topo	Keep	Port: 264	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point VPN-1 SecuRemote Topology Requests
	FW1_uaa	Keep	Port: 19191	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC User Authority API
	FW1_ufp	Keep	Port: 18182	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Check Point OPSEC URL Filtering Protocol
	GateCrasher	Keep	Port: 6970	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	GateCrasher trojan
	GNUtella_rtr_TCP	Keep	Port: 6347	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: BearShare, ToadNode, Gnucleus, Xolox, LimeWire
	GNUtella_TCP	Keep	Port: 6346	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: BearShare, ToadNode, Gnucleus, Xolox, LimeWire
	gopher	Keep	Port: 70	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	The Internet Gopher Protocol
	GoToMyPC	Keep	Port: 8200	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Remote Computer Access & Sharing application, also uses HTTP and HTTPS
	H323	Keep	Port: 1720	Advanced Advanced Source port: - Protocol Type: H.323 Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	videoconference transmissions over IP networks
	H323_any	Keep	Port: 1720	Advanced Advanced Source port: - Protocol Type: H.323_ANY Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	videoconference transmissions over IP networks
	HackaTack_31785	Keep	Port: 31785	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	HackaTack
	HackaTack_31787	Keep	Port: 31787	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	HackaTack trojan
	HackaTack_31788	Keep	Port: 31788	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	HackaTack trojan
	HackaTack_31790	Keep	Port: 31790	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	HackaTack trojan
	HackaTack_31792	Keep	Port: 31792	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	HackaTack trojan
	Hotline_client	Keep	Port: 5500-5503	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Hotline client connections
	http	Keep	Port: 80	Advanced Advanced Source port: - Protocol Type: HTTP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster Start synchronizing 30 seconds after connection initiation	Hypertext Transfer Protocol
	https	Keep	Port: 443	Advanced Advanced Source port: - Protocol Type: ENC-HTTP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster Start synchronizing 30 seconds after connection initiation	HTTP protocol over TLS/SSL
	HTTP_and_HTTPS_proxy	Keep	Port: 8080	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster
	ICKiller	Keep	Port: 1027	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	ICKiller
	ident	Keep	Port: 113	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Identify RCS keyword strings in files
	IKE_tcp	Keep	Port: 500	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	IPSEC Internet Key Exchange Protocol over TCP
	imap	Keep	Port: 143	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Interactive Mail Access Protocol
	iMesh	Keep	Port: 5000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	This port also used by many trojans and the upnp service
	InCommand	Keep	Port: 1029	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: ICQ Nuke 98 trojan
	IPSO_Clustering_Mgmt_Protocol	Keep	Port: 1111	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	used for distributing configuration changes among cluster members and cluster wide monitoring
	irc1	Keep	Port: 6660-6670	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Internet Relay Chat Protocol
	irc2	Keep	Port: 7000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Internet Relay Chat Protocol
	Jade	Keep	Port: 1024	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Latinus,NetSpy,RAT trojans and K Display Manager
	Kaos	Keep	Port: 1212	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Kaos trojan
	KaZaA	Keep	Port: 1214	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	FastTrack (KaZaA/Morpheus) P2P Protocol
	Kerberos_v5_TCP	Keep	Port: 88	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Kerberos authentication protocol (version 5)
	Kuang2	Keep	Port: 17300	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Kuang2 trojan
	ldap	Keep	Port: 389	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Lightweight Directory Access Protocol
	ldap-ssl	Keep	Port: 636	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Lightweight Directory Access Protocol over TLS/SSL
	login	Keep	Port: 513	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Remote login (rlogin)
	lotus	Keep	Port: 1352	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Lotus iNotes Web Access Protocol
	lpdw0rm	Keep	Port: 515	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Ramen trojan and printer service.
	Madster	Keep	Port: 5025	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Formerly called Aimster
	microsoft-ds	Keep	Port: 445	Advanced Advanced Source port: - Protocol Type: CIFS_PROTOCOL Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Microsoft CIFS over TCP
	Mneah	Keep	Port: 4666	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Mneah trojan
	MS-SQL-Monitor	Keep	Port: 1434	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Microsoft SQL Monitor
	MS-SQL-Server	Keep	Port: 1433	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Microsoft SQL Server
	MSNMS	Keep	Port: 1863	Advanced Advanced Source port: - Protocol Type: MSNMS_PROTOCOL Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster
	MSNP	Keep	Port: 1863	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	MSN Messenger
	MSN_Messenger_File_Transfer	Keep	Port: 6891-6900	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Microsoft Network Messenger File Transfer
	Multidropper	Keep	Port: 1035	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Multidropper trojan
	MySQL	Keep	Port: 3306	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Supported from version R55W, MySQL database server
	Napster_Client_6600-6699	Keep	Port: 6600-6699	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Napster clients. Also used by: WinMX
	Napster_directory_4444	Keep	Port: 4444	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Napster directory connections
	Napster_directory_5555	Keep	Port: 5555	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Napster directory connections
	Napster_directory_6666	Keep	Port: 6666	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Napster directory connections
	Napster_directory_7777	Keep	Port: 7777	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Napster directory connections
	Napster_directory_8888_primary	Keep	Port: 8888	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Napster directory connections (Primary)
	Napster_redirector	Keep	Port: 8875	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster
	nbsession	Keep	Port: 139	Advanced Advanced Source port: - Protocol Type: CIFS_PROTOCOL Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	NetBios Session Service
	NCP	Keep	Port: 524	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Novell NetWare Core Protocol
	netshow	Keep	Port: 1755	Advanced Advanced Source port: - Protocol Type: NetShow Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Microsoft NetShow (Windows Media Player)
	netstat	Keep	Port: 15	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	UNIX netstat Protocol, show network status
	nfsd-tcp	Keep	Port: 2049	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Network File System Daemon over TCP
	nntp	Keep	Port: 119	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Network News Transfer Protocol
	ntp-tcp	Keep	Port: 123	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Network Time Protocol (TCP)
	OAS-NameServer	Keep	Port: 2649	Advanced Advanced Source port: - Protocol Type: IIOP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Oracle Application Server (IIOP) NameServer
	OAS-ORB	Keep	Port: 2651	Advanced Advanced Source port: - Protocol Type: IIOP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Oracle Application Server (IIOP) ORB
	OpenWindows	Keep	Port: 2000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster
	Orbix-1570	Keep	Port: 1570	Advanced Advanced Source port: - Protocol Type: IIOP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	IONA Orbix Daemon (IIOP) Port 1570
	Orbix-1571	Keep	Port: 1571	Advanced Advanced Source port: - Protocol Type: IIOP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	IONA Orbix Daemon (IIOP) Port 1571
	pcANYWHERE-data	Keep	Port: 5631	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	PCs remote access security software, data
	pcTELECOMMUTE-FileSync	Keep	Port: 2299	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Symantec pcTELECOMMUTE File Synchronization
	pop-2	Keep	Port: 109	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Post Office Protocol - Version 2
	pop-3	Keep	Port: 110	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Post Office Protocol - Version 3
	Port_6667_trojans	Keep	Port: 6667	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Used by: Dark FTP,EGO,Maniac rootkit,Moses,ScheduleAgent,SubSeven,Trinity,The thing,Kaitex,WinSatan trojans.
	PostgreSQL	Keep	Port: 5432	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Supported from version R55W, PostgreSQL database server
	pptp-tcp	Keep	Port: 1723	Advanced Advanced Source port: - Protocol Type: PPTP_TCP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Point-to-Point Tunneling Protocol, extension of PPP
	RainWall_Command	Keep	Port: 6374	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	RainWall high availability daemon
	RAT	Keep	Port: 1097-1098	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	RAT trojan (Remote Administration Tool)
	Real-Audio	Keep	Port: 7070	Advanced Advanced Source port: - Protocol Type: PNA Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	RealNetworks PNA Protocol
	RealSecure	Keep	Port: 2998	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Automatic 'Suspicious Activity Monitoring' activator
	Remote_Desktop_Protocol	Keep	Port: 3389	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Microsoft RDP
	Remote_Storm	Keep	Port: 1025	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Fraggle Rock,NetSpy,md5 Backdoor trojans
	rtsp	Keep	Port: 554	Advanced Advanced Source port: - Protocol Type: RTSP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Real Time Streaming Protocol
	SCCP	Keep	Port: 2000	Advanced Advanced Source port: - Protocol Type: SCCP_TCP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Supported from version R55W, Skinny Client Control Protocol (SCCP)
	securidprop	Keep	Port: 5510	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Token based Authentication service (TCP)
	Shadyshell	Keep	Port: 1337	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Shadyshell trojan
	shell	Keep	Port: 514	Advanced Advanced Source port: - Protocol Type: RSHELL Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Remote shell (rsh)
	sip-tcp-ipv6	Keep	Port: 5060	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Session Initiation Protocol over TCP IPv6
	sip_any-tcp-ipv6	Keep	Port: 5060	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster
	SkyDance-T	Keep	Port: 4000	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Backdoor trojan
	smtp	Keep	Port: 25	Advanced Advanced Source port: - Protocol Type: SMTP Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Simple Mail Transfer Protocol
	SocketsdesTroie	Keep	Port: 1	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by the: tcpmux service
	sqlnet1	Keep	Port: 1521	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Oracle SQL*Net Version 1
	sqlnet2-1521	Keep	Port: 1521	Advanced Advanced Source port: - Protocol Type: SQLNET2 Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	part of Oracle SQL*Net Version 2 Services
	sqlnet2-1525	Keep	Port: 1525	Advanced Advanced Source port: - Protocol Type: SQLNET2 Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	part of Oracle SQL*Net Version 2 Services
	sqlnet2-1526	Keep	Port: 1526	Advanced Advanced Source port: - Protocol Type: SQLNET2 Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	part of Oracle SQL*Net Version 2 Services
	ssh	Keep	Port: 22	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	secure shell, encrypted and authenticated rsh
	ssh_version_2	Keep	Port: 22	Advanced Advanced Source port: - Protocol Type: SSH2 Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Secure Shell, version 1.x block
	ssl_v3	Keep	Port: 443	Advanced Advanced Source port: - Protocol Type: SSL_V3 Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	SSL version 3, dropping anything else.
	StoneBeat-Control	Keep	Port: 3002	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Stonesoft StoneBeat Control
	StoneBeat-Daemon	Keep	Port: 3001	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Stonesoft StoneBeat Daemon Heartbeat
	SubSeven	Keep	Port: 27374	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by:Bad Blood,EGO,Lion,Ramen,Seeker,The Saint,Tftloader,Webhead trojans
	SubSeven-G	Keep	Port: 1243	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: Tiles and Backdoor_g trojans
	T.120	Keep	Port: 1503	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	H323, Application sharing protocol
	TACACSplus	Keep	Port: 49	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Terminal Access Controller Access Control System over TCP
	tcp-high-ports	Keep	Port: >1023	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	TCP Ports 1024-65535
	telnet	Keep	Port: 23	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Telnet Protocol
	Terrortrojan	Keep	Port: 3456	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Terror trojan
	TheFlu	Keep	Port: 5534	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	TheFlu trojan
	time-tcp	Keep	Port: 37	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Time Server Protocol (TCP)
	TransScout	Keep	Port: 2004-2005	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	TransScout trojan
	Trinoo	Keep	Port: 1524	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Trinoo trojan
	UltorsTrojan	Keep	Port: 1234	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Also used by: SubSeven Java client
	uucp	Keep	Port: 540	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Unix-to-Unix Copy Program
	wais	Keep	Port: 210	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Wide Area Information Servers
	winframe	Keep	Port: 1494	Advanced Advanced Source port: - Protocol Type: WinFrame Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Allows servers to provide applications and data for attached computer workstations (Windows)
	WinHole	Keep	Port: 1081	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	WinHole trojan
	X11	Keep	Port: 6000-6063	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	X Window System
	Xanadu	Keep	Port: 1031	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Xanadu trojan
	Yahoo_Messenger_messages	Keep	Port: 5050	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Yahoo Messenger messages
	Yahoo_Messenger_Voice_Chat_TCP	Keep	Port: 5000-5001	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Yahoo Messenger Voice Chat
	Yahoo_Messenger_Webcams	Keep	Port: 5100	Advanced Advanced Source port: - Protocol Type: - Enable for TCP resource Match for 'Any' Session Timeout: Default Synchronize connections on Cluster	Yahoo Messenger Webcams video
Compound TCP
	Cdf	Keep	Port: 80 Compound Service: Cdf		http subservice for FloodGate use,Channel Definition Format
	Marimba_Netcaster	Keep	Port: 80 Compound Service: NetCaster		http subservice for FloodGate use, Marimba Castanet Tuner product
	Microsoft_Channels	Keep	Port: 80 Compound Service: CDF		http subservice for FloodGate use, Microsoft Channels
	Pointcast	Keep	Port: 80 Compound Service: pointcast		http subservice for FloodGate use, push web content
Citrix TCP
	Citrix_ICA_printing		Port: 1494		Citrix ICA printing traffic
UDP
	archie	Keep	Port: 1525	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Archie Internet Protocol, search for files over FTP servers
	biff	Keep	Port: 512	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	UNIX biff Protocol, give notice of incoming mail messages
	Blubster	Keep	Port: 41170	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Uses MANOLITO protocol
	bootp	Keep	Port: 67	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Bootstrap Protocol Server, users automatically configured
	Citrix_ICA_Browsing	Keep	Port: 1604	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Tcp Service for general Citrix browsing
	CP_SecureAgent-udp	Keep	Port: 19194-19195	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	SecureAgent Authentication service
	CU-SeeMe	Keep	Port: 7648-7652	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	person-to-person or group discussions videoconference
	daytime-udp	Keep	Port: 13	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Daytime Server Protocol (UDP)
	dhcp-relay	Keep	Port: 67	Advanced Advanced Source port: 67 Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 10 seconds Synchronize connections on Cluster	DHCP relay agent
	dhcp-rep-localmodule	Keep	Port: 68	Advanced Advanced Source port: 67 Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 10 seconds Synchronize connections on Cluster	DHCP reply to enforcement module only
	dhcp-req-localmodule	Keep	Port: 67	Advanced Advanced Source port: 68 Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 10 seconds Synchronize connections on Cluster	DHCP request from enforcement module only
	Direct_Connect_UDP	Keep	Port: 411-412	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Direct Connect P2P application. Used also by other clients
	discard-udp	Keep	Port: 9	Advanced Advanced Source port: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Discard Server Protocol (UDP)
	domain-udp	Keep	Port: 53	Advanced Advanced Source port: - Protocol Type: DNS_UDP Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Domain Name System Queries
	E2ECP	Keep	Port: 18241	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point End to End Control Protocol
	echo-udp	Keep	Port: 7	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Echo Protocol (UDP)
	eDonkey_4665	Keep	Port: 4665	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	eDonkey protocol. Used also by other clients.
	FreeTel-outgoing-server	Keep	Port: 21300	Advanced Advanced Source port: 21301-21305 Protocol Type: FreeTel Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	real-time full-duplex voice communication via the Internet-server
	FW1_load_agent	Keep	Port: 18212	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point ConnectControl Load Agent
	FW1_scv_keep_alive	Keep	Port: 18233	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point SecureClient Verification Keepalive Protocol
	FW1_snmp	Keep	Port: 260	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point VPN-1 & FireWall-1 SNMP Agent
	GNUtella_rtr_UDP	Keep	Port: 6347	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Also used by: BearShare, ToadNode, Gnucleus, Xolox, LimeWire
	GNUtella_UDP	Keep	Port: 6346	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Also used by: BearShare, ToadNode, Gnucleus, Xolox, LimeWire
	GTPv0	Keep	Port: 3386	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	used only for log resolving
	GTPv1-C	Keep	Port: 2123	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	used only for log resolving
	GTPv1-U	Keep	Port: 2152	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	used only for log resolving
	H323_ras	Keep	Port: 1719	Advanced Advanced Source port: - Protocol Type: H.323_RAS Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	RAS and associated connections (H.323 protocols)
	H323_ras_only	Keep	Port: 1719	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Endpoint to Gatekeeper and Gatekeeper to Gatekeeper communication
	HackaTack_31789	Keep	Port: 31789	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	HackaTack trojan
	HackaTack_31791	Keep	Port: 31791	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	HackaTack trojan
	Hotline_tracker	Keep	Port: 5499	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Hotline tracker connections
	ICQ_locator	Keep	Port: 4000	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Mirabilis ICQ versions
	IKE	Keep	Port: 500	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	IPSEC Internet Key Exchange Protocol (formerly ISAKMP/Oakley)
	interphone	Keep	Port: 22555	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Vocaltec Internet Phone
	kerberos-udp	Keep	Port: 750	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	secure method for authenticating a request for service
	Kerberos_v5_UDP	Keep	Port: 88	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Kerberos authentication protocol (version 5)
	L2TP	Keep	Port: 1701	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Layer 2 Tunneling Protocol
	MetaIP-UAT	Keep	Port: 5004	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point Meta IP UAM Client-Server Communication
	mgcp_CA	Keep	Port: 2727	Advanced Advanced Source port: - Protocol Type: MGCP_UDP Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Supported from version R55W, Media Gateway Control Protocol - Call-Agent port
	mgcp_MG	Keep	Port: 2427	Advanced Advanced Source port: - Protocol Type: MGCP_UDP Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Supported from version R55W, Media Gateway Control Protocol - Media Gateway port
	microsoft-ds-udp	Keep	Port: 445	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Microsoft CIFS over UDP
	MS-SQL-Monitor_UDP	Keep	Port: 1434	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Microsoft-SQL-Monitor_UDP
	MS-SQL-Server_UDP	Keep	Port: 1433	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Microsoft SQL Server
	MSN_Messenger_1863_UDP	Keep	Port: 1863	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Microsoft Network Messenger UDP
	MSN_Messenger_5190	Keep	Port: 5190	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Microsoft Network Messenger
	MSN_Messenger_Voice	Keep	Port: 6901	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Microsoft Network Messenger Voice communication
	MSSQL_resolver	Keep	Port: 1434	Advanced Advanced Source port: - Protocol Type: SQL_SLAMMER Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	MS SQL Sapphire /SQL Slammer Worm
	name	Keep	Port: 42	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Host Name Server
	nbdatagram	Keep	Port: 138	Advanced Advanced Source port: - Protocol Type: NBDATAGRAM Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	NetBios Datagram Service
	nbname	Keep	Port: 137	Advanced Advanced Source port: - Protocol Type: NBNAME Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	NetBios Name Service
	NEW-RADIUS	Keep	Port: 1812	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	NEW - Remote Authentication Dial-In User Service
	NEW-RADIUS-ACCOUNTING	Keep	Port: 1813	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	NEW - Remote Authentication Dial-In User Service accounting
	nfsd	Keep	Port: 2049	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Network File System Daemon over UDP (earlier versions of NFS)
	NoBackO	Keep	Port: 1201	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	NoBackO trojan
	ntp-udp	Keep	Port: 123	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Network Time Protocol (UDP)
	pcANYWHERE-stat	Keep	Port: 5632	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	PCs remote access security software, status
	RADIUS	Keep	Port: 1645	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Remote Authentication Dial-In User Service
	RADIUS-ACCOUNTING	Keep	Port: 1646	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Remote Authentication Dial-In User Service accounting
	RainWall_Daemon	Keep	Port: 6372	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	RainWall daemons communication
	RainWall_Status	Keep	Port: 6374	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	RainWall remote management status
	RainWall_Stop	Keep	Port: 6373	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	RainWall monitoring
	RDP	Keep	Port: 259	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point VPN-1 FWZ Key Negotiations - Reliable Datagram Protocol
	RexxRave	Keep	Port: 1104	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	RexxRave trojan
	rip	Keep	Port: 520	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Routing Information Protocol
	RIPng	Keep	Port: 521	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Routing Information Protocol for IPv6
	securid-udp	Keep	Port: 5500	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Token based Authentication service (UDP)
	sip	Keep	Port: 5060	Advanced Advanced Source port: - Protocol Type: SIP_UDP Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 40 seconds Synchronize connections on Cluster	Session Initiation Protocol
	sip_any	Keep	Port: 5060	Advanced Advanced Source port: - Protocol Type: SIP_UDP_ANY Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 40 seconds Synchronize connections on Cluster	Session Initiation Protocol
	snmp	Keep	Port: 161	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Simple Network Management Protocol
	snmp-read	Keep	Port: 161	Advanced Advanced Source port: - Protocol Type: Snmp-Read Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Simple Network Management Protocol - Read Only
	snmp-trap	Keep	Port: 162	Advanced Advanced Source port: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Simple Network Management Protocol Traps
	SWTP_Gateway	Keep	Port: 9281	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	VPN-1 Embedded/SofaWare commands
	SWTP_SMS	Keep	Port: 9282	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	VPN-1 embedded / SofaWare Management Server (SMS)
	syslog	Keep	Port: 514	Advanced Advanced Source port: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	UNIX syslog Protocol, control system log
	TACACS	Keep	Port: 49	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Terminal Access Controller Access Control System over UDP
	tftp	Keep	Port: 69	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Trivial File Transfer Protocol
	time-udp	Keep	Port: 37	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Time Server Protocol (UDP)
	tunnel_test	Keep	Port: 18234	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point tunnel testing application
	udp-high-ports	Keep	Port: >1023	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	UDP Ports 1024-65535
	VPN1_IPSEC_encapsulation	Keep	Port: 2746	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Check Point VPN-1 SecuRemote IPSEC Transport Encapsulation Protocol
	wap_wdp	Keep	Port: 9200	Advanced Advanced Source port: - Protocol Type: MMS Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Wireless Datagram Protocol: a simplified protocol suitable for low bandwidth mobile stations enables a connectionless mode.
	wap_wdp_enc	Keep	Port: 9202	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Wireless Datagram Protocol with Wireless Transport Layer Security
	wap_wtp	Keep	Port: 9201	Advanced Advanced Source port: - Protocol Type: MMS Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Wireless Transaction Protocol: a simplified protocol suitable for low bandwidth mobile stations enables a connection mode.
	wap_wtp_enc	Keep	Port: 9203	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Wireless Transaction Protocol with Wireless Transport Layer Security
	who	Keep	Port: 513	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	UNIX who Protocol, who is on the system
	WinMX	Keep	Port: 6257	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Also uses Napster ports
	Yahoo_Messenger_Voice_Chat_UDP	Keep	Port: 5000-5010	Advanced Advanced Source port: - Protocol Type: - Accept Replies Accept replies from any port Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Yahoo Messenger Voice Chat
RPC
	cachefsd	Keep	Program Number: 100235		SUN NFS/RPC file system cachefs daemon
	cmsd	Keep	Program Number: 100068		Calendar Manager Service Daemon
	mountd	Keep	Program Number: 100005		Initiate client access to NFS application
	nfsprog	Keep	Program Number: 100003		RPCs Network File System (Ordinary)
	nisplus	Keep	Program Number: 100300		NIS+ later version provides additional security and other facilities
	nlockmgr	Keep	Program Number: 100021		RPC, Network Lock Manager
	pcnfsd	Keep	Program Number: 150001		PCs (windows client) password authorization
	rstat	Keep	Program Number: 100001		RPC, Remote statistics
	rwall	Keep	Program Number: 100008		RPC, Shutdown messages
	sadmind	Keep	Program Number: 100232		Solstice AdminSuite
	snmpXdmid	Keep	Program Number: 100249		SUN SNMP to DMI mapper daemon
	statd	Keep	Program Number: 100024		Network status monitor daemon
	ttdbserverd	Keep	Program Number: 100083		ToolTalk database server
	ypbind	Keep	Program Number: 100007		Sun Yellow Pages binder (NIS), provide servers addressing information
	yppasswd	Keep	Program Number: 100009		Sun Yellow Pages protocol (NIS), password server
	ypserv	Keep	Program Number: 100004		Sun Yellow Pages directory service (YP) protocol, now known as NIS
	ypupdated	Keep	Program Number: 100028		Sun Yellow Pages protocol (NIS), update service
	ypxfrd	Keep	Program Number: 100069		Sun Yellow Pages protocol (NIS), transfers NIS maps
ICMP
	dest-unreach	Keep	Type: 3 Code: -		ICMP, destination unreach
	echo-reply	Keep	Type: 0 Code: -		ICMP, echo reply
	echo-request	Keep	Type: 8 Code: -		ICMP, echo request
	info-reply	Keep	Type: 16 Code: -		ICMP, info reply
	info-req	Keep	Type: 15 Code: -		ICMP, info request
	mask-reply	Keep	Type: 18 Code: -		ICMP, mask reply
	mask-request	Keep	Type: 17 Code: -		ICMP, mask request
	param-prblm	Keep	Type: 12 Code: -		ICMP, parameters problem
	redirect	Keep	Type: 5 Code: -		ICMP, route redirect
	source-quench	Keep	Type: 4 Code: -		ICMP, source quench
	time-exceeded	Keep	Type: 11 Code: -		ICMP, time to live exceeded
	timestamp	Keep	Type: 13 Code: -		ICMP, timestamp request
	timestamp-reply	Keep	Type: 14 Code: -		ICMP, timestamp reply
Other
	AH	Keep	IP Protocol: 51	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster	IPSEC Authentication Header Protocol
	backweb	Keep	IP Protocol: 17	Advanced Advanced Match: backweb_match Protocol Type: BackWeb Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	PUSH Web applications, send information directly to desktops. over the Internet
	egp	Keep	IP Protocol: 8	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Exterior Gateway Protocol, convey net-reachability information between gateways
	ESP	Keep	IP Protocol: 50	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster	IPSEC Encapsulating Security Payload Protocol
	FreeTel-incoming	Keep	IP Protocol: 17	Advanced Advanced Match: freetel_incoming Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	FreeTel Incoming Connections
	FreeTel-outgoing-client	Keep	IP Protocol: 17	Advanced Advanced Match: freetel_outgoing Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	real-time full-duplex voice communication via the Internet-client
	ftp_mapped	Keep	IP Protocol: 6	Advanced Advanced Match: "SRV_REDIRECT(21,0.0.0.0,21), set r_mhandler &ftp_code" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	FTP Port Mapping Service
	FW1_Encapsulation	Keep	IP Protocol: 94	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster	Check Point VPN-1 SecuRemote FWZ Encapsulation Protocol
	ggp	Keep	IP Protocol: 3	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Gateway-to-Gateway protocol
	gre	Keep	IP Protocol: 47	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster
	gtp_reverse	Keep	IP Protocol: 17	Advanced Advanced Match: gtp_rev_match Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster	GTP Reverse Connections
	gtp_v0_path_mgmt	Keep	IP Protocol: 17	Advanced Advanced Match: gtp_path_match_v0 Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	GTP version 0 path management
	gtp_v1_path_mgmt	Keep	IP Protocol: 17	Advanced Advanced Match: gtp_path_match_v1 Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	GTP version 1 path management
	http_mapped	Keep	IP Protocol: 6	Advanced Advanced Match: "SRV_REDIRECT(80,0.0.0.0,80) " Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	HTTP Port Mapping Service
	HTTP_wo_SCV	Keep	IP Protocol: 6	Advanced Advanced Match: "dport=80, set r_scvres SCV_DONT_VERIFY" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	HTTP without SCV enforcement
	icmp-proto	Keep	IP Protocol: 1	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Internet Control Message Protocol
	igmp	Keep	IP Protocol: 2	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Internet Group Management Protocol
	igrp	Keep	IP Protocol: 9	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Cisco Interior Gateway Routing Protocol
	ospf	Keep	IP Protocol: 89	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Open Shortest Path First Interior GW Protocol
	Partial-Destination-v6	Keep	IP Protocol: -1	Advanced Advanced Match: "PARTIAL_DST_ADDR_MATCH6(0x0,0x0,0x0,0x0,0,0)" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Filter IPv6 destination addresses based on mask and length
	Partial-Source-v6	Keep	IP Protocol: -1	Advanced Advanced Match: "PARTIAL_SRC_ADDR_MATCH6(0x0,0x0,0x0,0x0,0,0)" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Filter IPv6 source addresses based on mask and length
	pim	Keep	IP Protocol: 103	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster
	rip-response	Keep	IP Protocol: 17	Advanced Advanced Match: "dport=520,rip_cmd=RIPCMD_RESPONSE" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Routing Information Protocol - response
	sip_dynamic_ports	Keep	IP Protocol: -1	Advanced Advanced Match: sip_dynamic_ports_match Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Supported from version R55W, it allows sip connection to be opened on a dynamic port and not on the sip well-known port
	SIT	Keep	IP Protocol: 41	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster	IPv6 encasulated in IPv4
	Sitara	Keep	IP Protocol: 109	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Sitara Networks Protocol (SpeedSeeker)
	SIT_with_Intra_Tunnel_Inspection	Keep	IP Protocol: 41	Advanced Advanced Match: set6in4 Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster
	SKIP	Keep	IP Protocol: 57	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 600 seconds Synchronize connections on Cluster	IPSEC Simple Key Management for Internet Protocols
	smtp_mapped	Keep	IP Protocol: 6	Advanced Advanced Match: "SRV_REDIRECT(25,0.0.0.0,25) " Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	SMTP Port Mapping Service
	Snmp-Read-Only	Keep	IP Protocol: 17	Advanced Advanced Match: "snmp_ro_match, set r_mhandler &snmp_ro_code" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Simple Network Management Protocol - Read Only
	traceroute	Keep	IP Protocol: 17	Advanced Advanced Match: "uh_dport > 33000, ip_ttl < 30" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	UNIX Traceroute, print the route packets take to network host
	tunnel_test_mapped	Keep	IP Protocol: 17	Advanced Advanced Match: "SRV_REDIRECT_LOCAL_UDP(CP_TUNNEL_TEST_PORT, FP2_VER)" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	tunnel testing for a module performing the tunnel test
	vrrp	Keep	IP Protocol: 112	Advanced Advanced Match: - Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Virtual Router Redundancy Protocol
	X11-verify	Keep	IP Protocol: 6	Advanced Advanced Match: x11verify_code Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	X Window System With Authorization
	ZSP	Keep	IP Protocol: 6	Advanced Advanced Match: "dport=5054, set r_scvres SCV_DONT_VERIFY" Protocol Type: - Accept Replies Match for 'Any' Virtual Session Timeout: 0 seconds Synchronize connections on Cluster	Zone Security Protocol
DCE-RPC
	ALL_DCE_RPC	Keep	Interface UUID: 00000000-0000-0000-0000-000000000000		Special Service For Allowing All DCE-RPC Services
	DCOM-OXID_Resolver	Keep	Interface UUID: 99fcfec4-5260-101b-bbcb-00aa0021347a		Object eXport IDentifier Resolver Interface
	DCOM-RemoteActivation	Keep	Interface UUID: 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57		DCOM Remote Activation
	DCOM-RemUnknown2	Keep	Interface UUID: 00000143-0000-0000-c000-000000000046		Remote Unknown2 DCOM Interface
	DCOM-SystemActivation	Keep	Interface UUID: 000001a0-0000-0000-c000-000000000046		DCOM SystemActivation Interface
	HP-OpCctla	Keep	Interface UUID: 9e0c0224-3654-0000-9a8d-08000949ab4c		HP-OV OpC Control Agent
	HP-OpCctla-bulk	Keep	Interface UUID: 8d5cae88-43c9-0000-94f1-0800096df3a6		HP-OV OpC Control Agent (Bulk)
	HP-OpCctla-cfgpush	Keep	Interface UUID: 0d8fe322-d6ee-11d2-b858-0800096df3a6		HP-OV OpC Control Agent (cfgpush)
	HP-OpCdistm	Keep	Interface UUID: 5df3dc6f-a568-0000-020f-887805000000		HP-OV OpC Distribution Manager
	HP-OpCmsgrd-coa	Keep	Interface UUID: e0c92330-3ba9-0000-a38b-0800096df3a6		HP-OV OpC Message receiver (COA)
	HP-OpCmsgrd-m2m	Keep	Interface UUID: 6e0b494b-d551-0000-020f-88781a000000		HP-OV OpC Message Receiver (M2M)
	HP-OpCmsgrd-std	Keep	Interface UUID: 6d63f833-c0a0-0000-020f-887818000000		HP-OV OpC Message Receiver
	MSExchangeADL	Keep	Interface UUID: 12345678-1234-abcd-ef00-01234567cffb		Microsoft Exchange 2000 Active Directory Logon
	MSExchangeDirRef	Keep	Interface UUID: 1544f5e0-613c-11d1-93df-00c04fd7bd09		Microsoft Exchange 2000 Directory Reference
	MSExchangeDirRep	Keep	Interface UUID: e3514235-4b06-11d1-ab04-00c04fc2dcd2		Microsoft Exchange 2000 Directory Replication
	MSExchangeDSNSPI	Keep	Interface UUID: f5cc5a18-4264-101a-8c59-08002b2f8426		Microsoft Exchange Directory Services (NSPI)
	MSExchangeDSRep	Keep	Interface UUID: f5cc59b4-4264-101a-8c59-08002b2f8426		Microsoft Exchange Directory Replication Services
	MSExchangeDSXDS	Keep	Interface UUID: f5cc5a7c-4264-101a-8c59-08002b2f8426		Microsoft Exchange Directory Services XDS
	MSExchangeIS	Keep	Interface UUID: a4f1db00-ca47-1067-b31f-00dd010662da		Microsoft Exchange Information Store
	MSExchangeMTA	Keep	Interface UUID: 9e8ee830-4459-11ce-979b-00aa005ffebe		Microsoft Exchange Message Transfer Agent
	MSExchangeStoreAdm	Keep	Interface UUID: 89742ace-a9ed-11cf-9c0c-08002be7ae86		Microsoft Exchange Store Administration
	MSExchangeSysAtt	Keep	Interface UUID: 469d6ec0-0d87-11ce-b13f-00aa003bac6c		Microsoft Exchange System Attendant
	MSExchangeSysAttPriv	Keep	Interface UUID: 83d72bf0-0d89-11ce-b13f-00aa003bac6c		Microsoft Exchange System Attendant Private
GTP
	gtp_v0_AquaNet_China_default		GTP version: v0 Port: 3386	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 46099 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v0_AquaNet_Germany_default		GTP version: v0 Port: 3386	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 26299 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v0_AquaNet_Netherlands_default		GTP version: v0 Port: 3386	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 20499 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v0_AquaNet_UK_default		GTP version: v0 Port: 3386	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 23499 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v0_default		GTP version: v0 Port: 3386	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: - Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses	GPRS Tunneling Protocol version 0
	gtp_v1_AquaNet_China_default		GTP version: v1 Control Plane Port: 2123 User Plane Port: 2152	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 46099 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v1_AquaNet_Germany_default		GTP version: v1 Control Plane Port: 2123 User Plane Port: 2152	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 26299 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v1_AquaNet_Netherlands_default		GTP version: v1 Control Plane Port: 2123 User Plane Port: 2152	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 20499 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v1_AquaNet_UK_default		GTP version: v1 Control Plane Port: 2123 User Plane Port: 2152	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: 23499 Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses
	gtp_v1_default		GTP version: v1 Control Plane Port: 2123 User Plane Port: 2152	Advanced Advanced Allowed PDP Contents Any Allow specific IMSI Prefix: - Any Allow specific Access Point Names: Any Allow specific Access Point Names: 0 - verified Any Allow specific Access Point Names: 1 Allow usage of static IP addresses	GPRS Tunneling Protocol version 1