Concetrator 3000 Open TCP Ports

[fasteddye]

We recently had a Port Scan done on our external IP Addresses.  One of those IP Addresses scanned was our Concentrator 3000.  The report came back with the following TCP ports being open on the Concentrator 3000 - 80, 443, 1723, 10000, 10001, 10002, 10003, 10004, and 10009.  I am unsure if it is necessary to have any or all of these open.  The Concentrator 3000 is in front of our ASA5520.

Thanks.

[mvsheik123]

Hi,

It may depend on your infrastructure requirements but definitely not for 80/443- which allows anyone can access (and administer as long as they have the the pass) device on http/https. We do annual port scan, and all I have

for our VPN conc (used for L2L) 500/udp open.

I would definitely close those ports and see if that cause any issues.

hth

MS