GIS Servers and Ports

Firewalls are a good thing. They protect our data.  In GIS, we regularly use firewalls to filter how people can access our network and what leaves our server.  There are over 61,000 Ports or holes that we can open for a firewall.

 

Security+ Ports
Here is a list of the most important Ports from the Security+ exam.
Protocol Port
FTP – File Transport Protocol 20, 21
SSH – Secure Shell 22
SFTP – Secure File Transport Protocol (uses SSH) 22
SCP – Secure Copy (uses SSH) 22
Telnet 23
SMTP – Simple Mail Transport Protocol 25
TACACS – Terminal Access Controller Access-Control System 49
DNS – Domain Name System 53
DHCP – Dynamic Host Configuration Protocol 67, 68
TFTP – Trivial File Transport Protocol 69
HTTP – Hypertext Transfer Protocol 80
HTTPS – Hypertext Transfer Protocol Secure 443
SSL VPN – Secure Sockets Layer virtual private network 443
Kerberos 88
POP3 – Post Office Protocol version 3 110
NNTP – Network News Transfer Protocol 119
IMAP4 – Internet message access protocol version 4 143
SNMP – Simple Network Management Protocol 161
SNMP Trap – Simple Network Management Protocol Trap 162
LDAP – Lightweight Directory Access Protocol 389
ISAKMP (VPN) – Internet Security Association and Key Management Protocol (virtual private network) 500
Syslog 514
L2TP – Layer 2 Tunneling Protocol 1701
PPTP – Point-to-Point Tunneling Protocol 1723
RDP – Remote Desktop Protocol 338

 

In order to secure your GIS data, multiple firewalls can be constructed.

Esri Illustration of a simple firewall
A more complicated and secure Firewall
An even more complicated and secure firewall using Web Server and a reverse proxy

ArcServer uses 6080 and port 80 as HTTP firewalls.  Portal uses 443 (HTTPS with SSL), and 1433 and 1434 to communicate with Microsoft SQL Server.  All other ports should be closed to minimize the space cyber attacks and occur.

Advertisements
%d bloggers like this: