Changing the HTTPS-Port of the USG

This article will help you change the port for HTTPS access of the USG from 443 to another port, for example, 4443. This change can be done when you want to access your USG but from another port than the default port 443. We will show you how to do it. Please pay close attention to these steps, otherwise, it may happen that you lock yourself out.

There are two important steps:

1. add the new port to Service-Object and default group

2. change port under System => WWW

3. verification

1. First go to Configuration > Object > Services and add a new service. Name it however you like (e.g. USG_HTTPS). Set the IP Protocol on TCP. Choose the new HTTPS port (e.g. 4443) and enter it in Starting and Ending Port, then click on OK.

Now go to Service Group and choose the Default_Allow_WAN_To_ZyWALL service group and add the new service. According to the default firewall rules, the USG is defined to allow the services defined in this group from WAN to the device. Note that this will only work if you have not changed the default firewall rules!

2. Now go to Configuration > System > WWW and change the Server Port from 443 to the Port you have chosen (e.g. 4443)

3. Now you can verify the new access to the firewall with the WAN IP address of the device, followed by the new port (e.g. http://192.168.0.80:4443):