Disable tcp 1723 and 10000 on Concentrator?

[Andy White]

Hello,

Where di I need to go on the Concentrator to disable tcp 1723 and 10000?

We don't require these to be open and our pen test shows these as being open.

Thanks

[Jennifer Halim]

To disable TCP/1723 (PPTP):

http://www.cisco.com/en/US/docs/security/vpn3000/vpn3000_47/configuration/guide/tunnel.html#wp1008446

To disable TCP/10000 (IPSec over TCP/10000):

Configuration | Tunneling and Security | IPSec | NAT Transparency | untick IPSec over TCP

Hope that helps.