Port 264 on SMB Gateway

Soroosh — Mon, 21 Jul 2025 12:46:29 GMT

Hi Mates,

Recently, I received a threat alert on one of our SMB gateways, which is managed by Infinity Portal. The alert shows that port 264 is exposed. According to SK52421, this port is used for topology download from the security gateway (via the FWD daemon) to SecuRemote (build 4100 and higher) and SecureClient. I would like to know if this port is necessary and, if so, whether it is possible and meaningful to limit access to this port to specific IPs or domains.

* There is an S2S VPN and an RA-VPN on this SMB.

* The SMB runs on R81.10.10

Regards
Soroosh

Re: Port 264 on SMB Gateway

Chris_Atkinson — Tue, 22 Jul 2025 00:05:07 GMT

Mostly this is a legacy thing, there are existing SKs on this topic please refer sk132712 & sk147415 amongst others.

Please contact TAC if you require further clarification / assistance with the necessary changes.

topic Re: Port 264 on SMB Gateway in Spark Firewall (SMB)

Port 264 on SMB Gateway

Re: Port 264 on SMB Gateway