Vulnerable Ports

[dijeshkeloth]

Hi,

can anyone please provide a cisco document with the list of vulnerable ports to be blocked in cisco firewall?

Thanks,

[balaji.bandi]

there is no rule you should open or close it all depends on business requirement, personally by default you should block all ports only open required ports in commonly used for Local LAN to external.

NGFW can take feed from a different vendors and make use of it for other Nexge generation features.

[Marvin Rhoads]

By default you want to block EVERYTHING inbound other than what you have explicitly allowed. An ASA will do this automatically if you have setup security levels properly (e.g. inside = 100, outside =0). On FTD it is done with a default "BLOCK" rule in the access control policy.