About default in-path rules

SteelHead appliances come with three default in-path rules that are designed to pass through specific types of traffic unoptimized. These defaults are in place because protocols like Telnet, SSH, and HTTPS are commonly used during appliance deployment and configuration.

Default rule	Description and ports
All-IP: Secure	Ports 22, 49, 88, 261, 322, 443, 448, 465, 563, 585, 614, 636, 684, 695, 902, 989-990, 992-995, 1701, 1723, 2252, 2478-2479, 2482, 2484, 2492, 2679, 2762, 2998, 3077-3078, 3183, 3191, 3220, 3269, 3410, 3424, 3471, 3496, 3509, 3529, 3539, 3660-3661, 3713, 3747, 3864, 3885, 3896-3897, 3900, 3995, 4031, 5007, 5061, 5723, 6514, 7674, 8305, 9443, 9802, 11751, 12109, 41017. This default rule automatically passes traffic through on commonly secure ports (for example, SSH, HTTPS, and SMTPS).
All-IP: Interactive	Ports 77, 23, 37, 107, 179, 513-514, 1494, 1718-1720, 2000-2003, 2427, 2598, 2727, 3389, 5060, 5631, 5900-5903, 6000. This default rule automatically passes traffic through on interactive ports (for example, Telnet, TCP ECHO, remote logging, and shell).
All-IP: RBT-Proto	Ports 7744, 7800-7801, 7810, 7820, 7850, 7860, 7870, 7881-7882. This default rule automatically passes traffic through on commonly secure ports (for example, SSH, HTTPS, and SMTPS).

We recommend you keep the default in-path rules, as they support essential management protocols. However, if needed, you can override them by creating custom rules with higher priority. Modify the port groups used in the default rules to adjust their behavior.

Uncommon ports include 261, 448, 684, 695, 994, 2252, 2478, 2479, 2482, 2484, 2492, 2679, 2762, 2998, 3077, 3078, 3183, 3191, 3220, 3269, 3410, 3424, 3471, 3496, 3509, 3529, 3539, 3660, 3661, 3747, 3864, 3885, 3896, 3897, 3995, 4031, 5007, 5061, 7674, 9802, 11751, and 12109.