topic Re: SMB listening on HTTPS in Spark Firewall (SMB)

SMB listening on HTTPS

velo — Tue, 09 Jun 2026 08:09:19 GMT

Morning

We have an estate of SMB appliances that are centrally managed. During pen tests it has been picked up that they are listening on HTTPS (443). I raised this with TAC and they have said this is normal, and related to management, or VPN. This doesn't seem right to me? Gaia management is on 4434.

Does anybody have any insight into this? If I do a tcpdump the firewalls get scanned on that port from externally (which is expected on the internet) The problem is this is generating unwanted traffic. How can I close this port?

Thanks

Re: SMB listening on HTTPS

Chris_Atkinson — Tue, 09 Jun 2026 12:21:55 GMT

Please review sk105740 it may be useful for you.

If it is indeed RA-VPN related their is an option to instead reserve 443 for port-forwarding / NAT this is an advanced setting at least on locally-managed appliances.

Re: SMB listening on HTTPS

velo — Wed, 10 Jun 2026 11:48:19 GMT

Thanks, I believe it's the answer. The article is a little confusing to me and lacks some info.

I can't find those same settings on the SMB firewalls.

Thanks for the link though.