Cisco Cisco Web Security Appliance S670 Installationsanleitung

Depending on your network configuration, your firewall may 
need to be configured to allow access using the following ports. 
SMTP and DNS services must have access to the Internet. 

The web security appliance must be able to listen on the 
following ports:

FTP: port 21, data port TCP 1024 and higher

HTTP: port 80

HTTPS: port 443

Management access: ports 8443 (HTTPS) and 8080 
(HTTP)

SSH: port 22

The web security appliance must be able to make an outbound 
connection on the following ports:

DNS: port 53

FTP: port 21, data port TCP 1024 and higher

HTTP: port 80

HTTPS: port 443

LDAP: port 389 or 3268

LDAP over SSL: port 636

LDAP with SSL for global catalog queries: port 3269

NTP: port 123

SMTP: port 25

If you do not open port 80 and 443, you cannot 
download feature keys.