Plex Media Access

Hey gdavis17,

Can you please let me know how you created this security policy? I may recommend using a Business Application Rule using the Non-HTTP Based Policy template.

Hey gdavis17,

This setup works for me, where Source Zone is WAN connected to the WAN Port and the Protected Zone is LAN with my local Plex Server as the Application Server. Also be sure that your Plex Server is setup in manual mode for 32400. It can behave erratically due to a bug that may still exist. I'm actually glad I saw this thread, as I noticed my Plex UDP was setup using TCP (I'm not sure if UDP is necessary, however, I did it anyway, not that this current policy works...oops).

Nope. Plex 32400 is TCP only :-)

Not sure if you were able to get it working or not yet. I was able to get it working by creating a new policy where source was WAN and service = "Plex" and destination was LAN with network set to my plex host. The Plex service was a new service I created using TCP srcprt = 1024:65535 dstprt = 32400. The issue I was ran into when I was first trying to set this up was random source ports not being allowed through. Fixed that by setting srcprt to 1024:65535.

Agreed, I only had to setup TCP works like a champ:)

I set "objects" for everything - services, hosts, groups, VLANs etc. I find it much easier to manage and the corresponding access behaviour seems more understandable (to me anyway!).

My port-based services generally have source set as 1:65535 by default and I've never had a problem - interesting that you have. Why would excluding protected ports make any difference I wonder?

Thanks for the info. Was this a network policy or a business policy that you created? It looks like a network policy but I cant really tell and I want to change some things that I am doing around.

Thanks for taking the time...

I do the same as you with creating objects for everything. I am also wondering about excluding protected ports. It does look like he is using a network rule vs a business policy. One thing i cant figure out is if using a business policy I can't see how to add the service groups vs entering the port numbers for port forwarding.

I based my source ports off of a default service which used 1024:65535. I don't think it would cause problems to allow all ports though. It would just be an any statement.

I believe this was a network policy.