topic client service port change in Network Security

client service port change

thomasandy32 — Fri, 21 Feb 2020 15:33:39 GMT

Dears,

I want to change the client service port from 443 to some other port, I want to know which port range should be used for this client services, if I m not wrong the private port cannot be used.

crypto ikev2 enable OUTSIDE client-services port 443

crypto ikev2 enable OUTSIDE client-services port ?????

Ports with numbers 0–1023 are called system or well-known ports; ports with numbers 1024-49151 are called user or registered ports, and ports with numbers 49152-65535 are called dynamic and/or private ports.

Re: client service port change

Dennis Mink — Sun, 25 Mar 2018 22:23:10 GMT

Thomas,

why would you want to change it?

have you got one public IP or something and you are already running a webserver that responds to 443?

Re: client service port change

thomasandy32 — Mon, 26 Mar 2018 07:31:54 GMT

I am giving my customer anyconnect vpn client directly by dropbox I want to disable the client services completely or to some other port so that the public IP should not be accessible from Internet on well know port.(443)

Hence whenever the user wants the anyconnect client and when they enter in their browser https//:publicip the certificate presented to the user is a CA signed still the direct access to the public ip on port 443 is a risk ???

if it is a risk then I shld change to some other port or I have to disable them, once disabling I hope it will not affect the other site to site IKEv2 vpn ??

thanks