Port 21

[triznut]

Running PIX515

What do I need to look for in determining why port 21 is open to the public on both my Outside and DMZ interfaces (like it's a general setting or something)? I found this out when I was doing some port scanning (from home) on both interface's subnets? It's nothing obvious!

Thanks!

[nkhawaja]

check the access-list and static statements in config

[ehirsel]

Is virtual telnet and/or virtual http configured on the pix? Check if aaa authentication is also configured for inbound traffic on the outside interface.

[triznut]

What are the virtual Telnet and Http about?

The only things I have setup in the Pix that maybe related are access to the unit via telnet and Https (for PDM access) other than those two things I can't see anything else... I wont think those factors have anything to do on port 21.

Thanks!