port 1720 always open

[musthafa786]

Hi,

I have two layer of firewall , front end is checkpoint and back end is cisco fwsm , when i do nmap port sacn from external network to inside any host I can see port 1720 is as always open , but there is no service running in server with port 1720, I know port 1720 is H.323 call setup protocol used by multimedia collaborative apps such as NetMeeting to establish and control a collaborative session.

could anyone help me on this ?

Regards,

Musthafa.

[usmanashaikh]

This is coming from the Checkpoint Firewall which inspects traffic for H.323 (1720) so anything behind the firewall appears to be responding to 1720.

https://community.checkpoint.com/t5/Russian/All-hosts-behind-Check-Point-have-open-tcp-1720-port-in-port/td-p/11304

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk43033

You can disable this behaviour as per the above links