07-08-2010 09:02 AM - edited 03-10-2019 05:03 AM
I have have searched high and low via Google and within cisco.com for the answer to this, but can not seem to find it documented anywhere. I am attempting to identify all ports that are required to manage the a Cisco IPS so that I can open up the firewalls. It is my understanding that the ports below are required, but I am not sure if I am missing anything, please see below:
TCP 22: Source => Sensor Admin
TCP 443: Source => Sensor Admin
UDP 123: Sensor Admin => NTP Server
Am I missing anything? Thank you!
Jonathan
Boulder, Co
Solved! Go to Solution.
07-08-2010 09:56 AM
Jonathon;
If you will be making use of automatic updates for signatures and global correlation updates you will also need to allow the IPS management IP address access on TCP 80 (signature and GC updates) and UDP 53 (GC updates).
Scott
07-08-2010 12:21 PM
Additionally, if you plan to use SNMP, you will need to allow UDP/161 and UDP/162 between the sensor and your management station.
Thank you,
Blayne Dreier
Cisco TAC IDS Team
**Please check out our Podcast**
TAC Security Show: http://www.cisco.com/go/tacsecuritypodcast
07-08-2010 09:56 AM
Jonathon;
If you will be making use of automatic updates for signatures and global correlation updates you will also need to allow the IPS management IP address access on TCP 80 (signature and GC updates) and UDP 53 (GC updates).
Scott
07-08-2010 12:21 PM
Additionally, if you plan to use SNMP, you will need to allow UDP/161 and UDP/162 between the sensor and your management station.
Thank you,
Blayne Dreier
Cisco TAC IDS Team
**Please check out our Podcast**
TAC Security Show: http://www.cisco.com/go/tacsecuritypodcast
07-08-2010 12:45 PM
Thank you gentlemen, that answers my question. Have a GREAT day!
Jonathan
Boulder, Co
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide