Communication Ports and Protocols
For optimum security, the total number of open ports on the GUI Server and Device Server
is kept to a minimum. For best practices on mitigating the vulnerabilities of open ports
in UNIX on which NSM is built and deployed, refer
http://www.juniper.net/us/en/local/pdf/app-notes/3500183-en.pdf
.
The following tables list the inbound and outbound ports on the NSM management
system.
Table 22: Inbound ports on the NSM Management System
Description
Protocol
Port
In an HA setup, the HA server
synchronizes the Primary and Secondary
NSM servers using rsync to transfer files
through this port.
TCP
22
The client computer accesses the
NSMXpress Web interface using this port.
TCP
443
STRM devices connect to the
PostgreSQL on this port to get profiler
data.
TCP
5432
Devices running ScreenOS Software
connect to the Device Server on this port.
TCP
7800
•
The GUI Server receives
communication from the Device
Server on this port
•
In releases earlier than NSM 2008.2,
the GUI client connects to the GUI
Server on this port.
TCP
7801
In an HA installation, heartbeats are sent
to the peer on this port.
UDP
7802
IDP Series sensors connect with the
Device Server on this port.
TCP
7803
Devices running Junos OS, IC Series, SA
Series, and EX Series devices connect
with the Device Server on this port.
TCP
7804
From release 2008.2 onwards, the GUI
client connects with the GUI Server on
this port.
TCP
7808
Optional; this port is used to download
the GUI client from the NSM server.
TCP
8443
Copyright © 2010, Juniper Networks, Inc.
196
Network and Security Manager Installation Guide
Summary of Contents for NETWORK AND SECURITY MANAGER 2010.4 - REV1
Page 6: ...Copyright 2010 Juniper Networks Inc vi...
Page 14: ...Copyright 2010 Juniper Networks Inc xiv Network and Security Manager Installation Guide...
Page 22: ...Copyright 2010 Juniper Networks Inc xxii Network and Security Manager Installation Guide...
Page 24: ...Copyright 2010 Juniper Networks Inc 2 Network and Security Manager Installation Guide...
Page 42: ...Copyright 2010 Juniper Networks Inc 20 Network and Security Manager Installation Guide...
Page 70: ...Copyright 2010 Juniper Networks Inc 48 Network and Security Manager Installation Guide...
Page 92: ...Copyright 2010 Juniper Networks Inc 70 Network and Security Manager Installation Guide...
Page 152: ...Copyright 2010 Juniper Networks Inc 130 Network and Security Manager Installation Guide...
Page 214: ...Copyright 2010 Juniper Networks Inc 192 Network and Security Manager Installation Guide...
Page 239: ...PART 3 Index Index on page 219 217 Copyright 2010 Juniper Networks Inc...
Page 240: ...Copyright 2010 Juniper Networks Inc 218 Network and Security Manager Installation Guide...
Page 244: ...Copyright 2010 Juniper Networks Inc 222 Network and Security Manager Installation Guide...