| 3.5 |  | Task 3: Port to Application Mapping (PAM) |
| 3.5.1 |  | PAM overview |

| After completing the first two tasks to set up CBAC, Port to Application Mapping (PAM) must be established. PAM enables customization of TCP or UDP port numbers for network services or applications. PAM uses this information to support network environments that run services using ports that are different from the registered or well-known ports associated with an application.

Using the port information, PAM establishes a table of default port to application mapping information at the firewall. The information in the PAM table enables CBAC supported services to run on nonstandard ports. Previously, CBAC was limited to inspecting traffic using only the well-known or registered ports associated with an application. PAM allows network administrators to customize network access control for specific applications and services .

PAM also supports host or subnet-specific port mapping, which enables the application of PAM to a single host or subnet using standard ACLs. Host or subnet specific port mapping is done using standard ACLs .