topic Re: Vulnerable Ports in Network Security

Vulnerable Ports

dijeshkeloth — Mon, 21 Dec 2020 17:45:23 GMT

Hi,

can anyone please provide a cisco document with the list of vulnerable ports to be blocked in cisco firewall?

Thanks,

Re: Vulnerable Ports

balaji.bandi — Mon, 21 Dec 2020 19:44:00 GMT

there is no rule you should open or close it all depends on business requirement, personally by default you should block all ports only open required ports in commonly used for Local LAN to external.

NGFW can take feed from a different vendors and make use of it for other Nexge generation features.

Re: Vulnerable Ports

Marvin Rhoads — Tue, 22 Dec 2020 03:49:35 GMT

By default you want to block EVERYTHING inbound other than what you have explicitly allowed. An ASA will do this automatically if you have setup security levels properly (e.g. inside = 100, outside =0). On FTD it is done with a default "BLOCK" rule in the access control policy.