topic Re: Protection of port 80 in Firewall and Security Management

Protection of port 80

Network_M — Mon, 07 Feb 2022 05:47:29 GMT

I have a web-site facing to public.

3 ports are open in Security Policy: 80/tcp, 443/tcp, 53/udp.

I have redirection on web server from 80 to 443, that is ok.

But there are some scans and potential script executions on port 80.

Firewall shows that scripts as accepted.

IPS is enabled.

How to protect port 80? Or is it possible redirect port 80 to 443 on firewall level?

Any valuable advices are appreciated.

Thanks!

Chris_Atkinson — Mon, 07 Feb 2022 08:41:13 GMT

Plenty of options here depending on what you're trying to achieve including separate offerings such as AppSec.

With that said @Danny provided some examples previously on things like blocking IoT Scanners / TOR Exit nodes / Geolocation Policy, refer:

Network_M — Mon, 07 Feb 2022 09:08:50 GMT

Thank you, but there are so many scanners in the internet, even scriptkiddies can execute scripts.

It will not be solution I think.

Chris_Atkinson — Mon, 07 Feb 2022 09:15:27 GMT

As above if you provide something a little less generic we will probably be better able to guide you.

Not withstanding to get the best out of the available gateway controls HTTPS inspection will be a factor.

Network_M — Mon, 07 Feb 2022 12:01:15 GMT

Can HTTPS inspection control port 80? It is not encrypted port.