Im under the imperssion that no port is accessible from the outside interface on PIX unless you permit it with an ACL.
Though i guess it opens the ports it needs for return traffic that is initiated from the inside network. Otherwise it shouldnt have any ports open.
Then again im a total newbie when it comes to PIX firewalls but they should block any other ports other than return traffic ports and then its already traffic thats iniated from a trusted part of the network.
If you mean some way to show the connections and ports opened for traffic trough the PIX then i guess the command
pixfirewall# show conn all
would show the connections and their ports on the firewall.
