Control of outbound source port ranges

[User43047177]

We are trying to implement an IPS system which will inspect a fraction of proxy outbound traffic. Things would be far simpler if it were possible to control the ranges of outbound source ports used by the proxy. Could you point me to any documentation about these settings or an API documentation which I can use to write a script to achieve this goal?

[fw_mon · Accepted solution]

I believe there are no such property or function, the epemeral port range is a global OS setting.

You can direct a desired fraction of the traffic to a next hop proxy (that can be a local port on the same MWG) and monitor this traffic only using a dest port instead.

[User43047177]

Thank you for the information. We will rely on the destination port values as you suggested.