Network printing and or GPOs while using ZTNA

Does your Printer only allow those high ports? (So to speak a port range)? 

Because often times printer allow a fixed port to print. Or do you talk about the printer spooler of Microsoft? 

https://social.technet.microsoft.com/Forums/en-US/8fa8db30-ed33-46bc-ba67-aa8061333cc4/print-spooler-network-ports-and-firewall-what-does-the-tcp-49159-port-do?forum=winserverprint

Essentially Microsoft "old" system will be hard to be reflected on a newer Solution like ZTNA. Same with GPOs.

While GPOs can be replaced by tools like intunes and others, printserver are likely be migratable by a printing service, which does not need such a large number of ports (for what ever reason?). 

Hi LuCar Toni

Thank you for your reply. Yes I am taliking about the print spooler. It seems not to be a good solution to let those ports closed since printing in windows becomes really slow then.

At all I understand what you say about an "old" systems, so we gonna need to some steps before considering switching to ZTNA (regarding GPOs, etc.).

So I guess I got the answer i needed.

Hi LuCar Toni

Thank you for your reply. Yes I am taliking about the print spooler. It seems not to be a good solution to let those ports closed since printing in windows becomes really slow then.

At all I understand what you say about an "old" systems, so we gonna need to some steps before considering switching to ZTNA (regarding GPOs, etc.).

So I guess I got the answer i needed.

Also, just to add to the above point, from a Sophos ZTNA perspective, we are working on providing an option to define port ranges for agent based applications. While I don't have the exact date, we are targeting Q2 of this year for the rollout.