Ports in searches

The Cloud-Delivered Firewall Management Center accepts specific syntax for port numbers in searches.

You can enter port numbers in these formats:

  • A single port number.

  • A comma-separated list of port numbers.

  • Two port numbers separated by a dash to represent a range of port numbers.

  • A port number or range of port numbers preceded by an exclamation mark to indicate a negation of the specified ports.

Note

Avoid using spaces when specifying port numbers or ranges.

Port syntax examples

Example

Description

21

Returns all events on port 21, including TCP and UDP events.

!23

Returns all events except those on port 23.

25/tcp

Returns all TCP-related intrusion events on port 25.

21/tcp,25/tcp

Returns all TCP-related intrusion events on ports 21 and 25.

21-25

Returns all events on ports 21 through 25.