topic Allow Web on upper level ports in Network Security https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165106#M1061034 <P>I have a VPN setup and working (PIX to Contivity) to access a web-based application. The application does not use the traditional 80 or 8080 ports. It starts in the 7xxx range and can grow depending on connection number. The VPN is working, but I get blocked from using the web page on this upper level port. Is there are way to allow http traffic on these upper level ports?</P><P></P><P>Thanks for your help</P> Fri, 21 Feb 2020 06:30:00 GMT mloggins 2020-02-21T06:30:00Z Allow Web on upper level ports https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165106#M1061034 <P>I have a VPN setup and working (PIX to Contivity) to access a web-based application. The application does not use the traditional 80 or 8080 ports. It starts in the 7xxx range and can grow depending on connection number. The VPN is working, but I get blocked from using the web page on this upper level port. Is there are way to allow http traffic on these upper level ports?</P><P></P><P>Thanks for your help</P> Fri, 21 Feb 2020 06:30:00 GMT https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165106#M1061034 mloggins 2020-02-21T06:30:00Z Re: Allow Web on upper level ports https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165107#M1061036 <HTML><HEAD></HEAD><BODY><P>How do you set your "crypto" access-list ?</P><P>I think it would be simply just to define several "crypto" access-lists on the PIX to match interesting traffic to be encrypted, with a destination of tcp 7xxx . How about the packet`s source , does it use upper level random ports also ?</P><P></P><P>Regards,</P><P>Engel</P></BODY></HTML> Sat, 18 Jan 2003 13:49:33 GMT https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165107#M1061036 engel 2003-01-18T13:49:33Z Re: Allow Web on upper level ports https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165108#M1061039 <HTML><HEAD></HEAD><BODY><P>The crypto access-lists are set to allow all ip traffic from the ip address through, not specific ports. Can you specify a range of addresses in a single access-list ?</P></BODY></HTML> Mon, 20 Jan 2003 16:25:57 GMT https://community.cisco.com/t5/network-security/allow-web-on-upper-level-ports/m-p/165108#M1061039 mloggins 2003-01-20T16:25:57Z