Cisco Cisco Email Security Appliance C680 Guia Do Utilizador

Página de 1211
 
D-2
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
 
Appendix D      Firewall Information
  
82
HTTP
In
AsyncOS IPs
Used for viewing the Cisco Anti-Spam 
quarantine.
83
HTTPS
In
AsyncOS IPs
Used for viewing the Cisco Anti-Spam 
quarantine.
110
TCP
Out
POP Server
POP authentication for end users for 
Cisco Spam Quarantine
123
UDP
In & Out
NTP Server
NTP if time servers are outside 
firewall.
143
TCP
Out
IMAP Server
IMAP authentication for end users for 
Cisco Spam Quarantine
161
UDP
In
AsyncOS IPs
SNMP Queries
162
UDP
Out
Management Station
SNMP Traps
389 
3268
LDAP
Out
LDAP Servers
LDAP if LDAP directory servers are 
outside firewall. LDAP authentication 
for Cisco Spam Quarantine
636
3269
LDAPS
Out
LDAPS
LDAPS — ActiveDirectory’s Global 
Catalog Server (uses SSL)
443
TCP
In
AsyncOS IPs
Secure HTTP (
https
) access to the 
GUI for system monitoring.
443
TCP
Out
res.cisco.com
Cisco Registered Envelope Service
443
TCP
Out
update-manifests.ironport
.com
Verify the latest files for the update 
server. 
443
TCP
Out
phonehome.senderbase.or
g
Receive/Send Outbreak Filters
443 
TCP 
Out
In the command-line 
interface, run the 
websecurityadvancedco
nfig
 command and accept 
all defaults. The Web 
security service hostname 
is shown. 
Cloud service for obtaining URL 
reputation and category information for 
URL filtering. 
443
TCP 
Out 
As configured in Security 
Services > File 
Reputation and Analysis, 
Advanced section, Cloud 
Server Pool parameter. 
If configured, the port for access to 
cloud services for obtaining file 
reputation. 
The default port is 32137. 
For file analysis services, see port 443.
443
TCP 
Out 
As configured in Security 
Services > File 
Reputation and Analysis, 
Advanced section. 
Access to cloud services for file 
analysis. 
For file reputation services, see port 
443 or 32137. 
514
UDP/TCP
Out
Syslog Server
Syslog logging
628
TCP
In
AsyncOS IPs
QMQP if injecting email from outside 
firewall.
Table D-1
Firewall Ports  (continued)