Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=user-guide-features-configure-access-control-port-range

Port range

The Port range tab lets you set specific ranges of ports to use in your IPv4 and IPv6 access control entries (ACEs). This feature increases security by letting you use ACEs to block a large range of ports or allow only a small range for hosts with specific functions.

To create a new port range, go to Configure > Access Control > Port range and click Add.

You can configure the following settings:

  • Name: Enter a name for your port range.

    Tip

    We recommend a port range name that easily identifies the range of ports it contains. You can only see this name when selecting a port range for your ACEs. You can't see the ports it contains.

  • Minimum port: The starting port for your range.

  • Maximum port: The end port for your range.

Click Apply to save your port range.

More information