Port 264 on SMB Gateway

[Soroosh]

Hi Mates,

 Recently, I received a threat alert on one of our SMB gateways, which is managed by Infinity Portal. The alert shows that port 264 is exposed. According to SK52421, this port is used for topology download from the security gateway (via the FWD daemon) to SecuRemote (build 4100 and higher) and SecureClient. I would like to know if this port is necessary and, if so, whether it is possible and meaningful to limit access to this port to specific IPs or domains.

* There is an S2S VPN and an RA-VPN on this SMB.

* The SMB runs on R81.10.10

Regards
Soroosh

[Chris_Atkinson · Accepted solution]

Mostly this is a legacy thing, there are existing SKs on this topic please refer sk132712 & sk147415 amongst others.

Please contact TAC if you require further clarification / assistance with the necessary changes.