Cisco Cisco Email Security Appliance C160 Betriebsanweisung
D-2
User Guide for AsyncOS 9.7 for Cisco Email Security Appliances
Appendix D Firewall Information
82
HTTP
In
AsyncOS IPs
Used for viewing the Cisco Anti-Spam
quarantine.
quarantine.
83
HTTPS
In
AsyncOS IPs
Used for viewing the Cisco Anti-Spam
quarantine.
quarantine.
110
TCP
Out
POP Server
POP authentication for end users for
Cisco Spam Quarantine
Cisco Spam Quarantine
123
UDP
In & Out
NTP Server
NTP if time servers are outside
firewall.
firewall.
143
TCP
Out
IMAP Server
IMAP authentication for end users for
Cisco Spam Quarantine
Cisco Spam Quarantine
161
UDP
In
AsyncOS IPs
SNMP Queries
162
UDP
Out
Management Station
SNMP Traps
389
3268
LDAP
Out
LDAP Servers
LDAP if LDAP directory servers are
outside firewall. LDAP authentication
for Cisco Spam Quarantine
outside firewall. LDAP authentication
for Cisco Spam Quarantine
636
3269
3269
LDAPS
Out
LDAPS
LDAPS — ActiveDirectory’s Global
Catalog Server (uses SSL)
Catalog Server (uses SSL)
443
TCP
In
AsyncOS IPs
Secure HTTP (
https
) access to the
GUI for system monitoring.
443
TCP
Out
res.cisco.com
Cisco Registered Envelope Service
443
TCP
Out
update-manifests.ironport
.com
.com
Obtain the list of the latest files from
the update server (for physical
hardware appliances.)
the update server (for physical
hardware appliances.)
443
TCP
Out
update-manifests.sco.cisc
o.com
o.com
Obtain the list of the latest files from
the update server (for virtual
appliances.)
the update server (for virtual
appliances.)
443
TCP
Out
phonehome.senderbase.or
g
g
Receive/Send Outbreak Filters
443
TCP
Out
In the command-line
interface, run the
interface, run the
websecurityadvancedco
nfig
command and accept
all defaults. The Web
security service hostname
is shown.
security service hostname
is shown.
Cloud service for obtaining URL
reputation and category information for
URL filtering.
reputation and category information for
URL filtering.
443
TCP
Out
As configured in Security
Services > File
Reputation and Analysis,
Advanced Settings for
File Reputation section,
Cloud Server Pool
parameter.
Services > File
Reputation and Analysis,
Advanced Settings for
File Reputation section,
Cloud Server Pool
parameter.
If configured, the port for access to
cloud services for obtaining file
reputation.
cloud services for obtaining file
reputation.
The default port is 32137.
For file analysis services, see port 443.
Table D-1
Firewall Ports (continued)