Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING INTRUSION DETECTION PREVENTION DEVICES GUIDE REV 01, Руководство пользователя

Страница: 25 / 104

Table 5: Required Ports on NSMXpress Series II
Depends on
Configuration
Internet LAN Description Port Direction
No No Yes SSH command-line management 22 In
No No Yes Web interface for administrator
login 443
Yes Yes LAN Web interface for listening for NSM
API messages. 8443
No Yes Yes Connections from managed
devices to the NSM appliance 7800
No No Yes Connections from the NSM GUI
Client to NSM 7801
Yes No Yes Heartbeat between peers in an HA
cluster 7802
Yes Yes Yes Connections from managed IDP
devices to NSM 7803
Yes Yes Yes Connections from devices running
Junos, Secure Access devices, or
Infranet Controller devices 7804
No Yes Yes SSH connection to new managed
device 22 Out
Yes No Yes Telnet connection to new
managed device 23
No No Yes DNS lookups 53
Yes Yes No System Security Updates from
Juniper Networks 80
Yes No Yes Shared Disk portmap lookup 111
Yes Yes Yes Network Time Protocol (NTP) time
synchronization 123
Yes No Yes Shared Disk NFS connection 2049
For more information on ports, refer to the Network and Security Manager Installation
Guide .
5 Copyright © 2010, Juniper Networks, Inc.
Chapter 1: Getting Started