IOS_XR: CSM firewall

[Garry Peirce]

Hi all - I'm looking to install CSM 3.5.1. I'm assuming it needs to communicate with CCO, but I don't see any sort of firewall port list mentioned in the install guide to enable that.  If needed, does anyone know or have a pointer where that info can be found?  

TIA,

[xr-escalation]

CSM does not require a particular firewall port to access CCO. It just needs to have an outgoing connection to the Internet.

[Garry Peirce]

Ok, so to confirm, I can just block all incoming TCP un-established connections to it other than my ssh and tcp5000 access to it. Desiring to further harden it, also block all else save identified ICMP and UDP (53,123) hosts it should be communicating with.

[xr-escalation]

Yes, CSM Server listens on port 5000.