Protocol and port security
Suggest changes
PDFs
In addition to performing on-box security operations and functions, the hardening of a solution must also include off-box security mechanisms. Leveraging additional infrastructure devices, such as firewalls, intrusion prevention systems (IPSs), and other security devices, for filtering and limiting access to ONTAP is an effective way to establish and maintain a stringent security posture. This information is a key component for filtering and limiting access to the environment and its resources.
Commonly used protocols and ports
| Service | Port/Protocol | Description |
|---|---|---|
|
22/TCP |
SSH login |
|
23/TCP |
Remote login |
|
53/TCP |
Domain Name Server |
|
80/TCP 80/UDP |
HTTP |
|
111/TCP |
Remote procedure call |
|
123/UDP |
Network Time Protocol |
|
135/UDP |
Microsoft Remote Procedure Call |
|
137/TCP |
NetBIOS name service |
|
139/TCP |
NetBIOS service session |
|
161/UDP |
SNMP |
|
443/TCP |
Secure link:http |
|
445/TCP |
Microsoft directory services |
|
500/UDP |
Internet Protocol Security |
|
635/UDP |
NFS mount |
|
953/UDP |
Name daemon |
|
2049/UDP |
NFS server daemon |
|
2050/TCP |
NetApp remote volume protocol |
|
3260/TCP |
iSCSI target port |
|
4045/TCP |
NFS lock daemon |
|
4046/TCP |
NFS mountd protocol |
|
4046/UDP |
Accounting protocol |
|
4049/UDP |
NFS rquotad protocol |
|
4444/UDP |
Kerberos 524 |
|
4500/UDP |
Internet Protocol Security |
|
5125/UDP |
Alternate control port for disk |
|
5353/UDP |
Multicast DNS |
|
5986/UDP |
HTTPS port: listening binary protocol |
|
8023/TCP |
Node-scope Telnet |
|
8443/TCP |
7MTT GUI tool through link:httpS |
|
8514/TCP |
Node-scope RSH |
|
9877/TCP |
KMIP client port (internal local host only) |
|
10000/TCP |
NDMP |
|
40001/TCP |
CIFS witness port |
|
50000/TCP |
Transport layer security |
|
65200/TCP |
iSCSI port |
|
65502/TCP |
Secure Shell |
|
65503/TCP |
vsun |
NetApp internal ports
| Port/Protocol | Description |
|---|---|
900 |
NetApp cluster RPC |
902 |
NetApp cluster RPC |
904 |
NetApp cluster RPC |
905 |
NetApp cluster RPC |
910 |
NetApp cluster RPC |
911 |
NetApp cluster RPC |
913 |
NetApp cluster RPC |
914 |
NetApp cluster RPC |
915 |
NetApp cluster RPC |
918 |
NetApp cluster RPC |
920 |
NetApp cluster RPC |
921 |
NetApp cluster RPC |
924 |
NetApp cluster RPC |
925 |
NetApp cluster RPC |
927 |
NetApp cluster RPC |
928 |
NetApp cluster RPC |
929 |
NetApp cluster RPC |
931 |
NetApp cluster RPC |
932 |
NetApp cluster RPC |
933 |
NetApp cluster RPC |
934 |
NetApp cluster RPC |
935 |
NetApp cluster RPC |
936 |
NetApp cluster RPC |
937 |
NetApp cluster RPC |
939 |
NetApp cluster RPC |
940 |
NetApp cluster RPC |
951 |
NetApp cluster RPC |
954 |
NetApp cluster RPC |
955 |
NetApp cluster RPC |
956 |
NetApp cluster RPC |
958 |
NetApp cluster RPC |
961 |
NetApp cluster RPC |
963 |
NetApp cluster RPC |
964 |
NetApp cluster RPC |
966 |
NetApp cluster RPC |
967 |
NetApp cluster RPC |
7810 |
NetApp cluster RPC |
7811 |
NetApp cluster RPC |
7812 |
NetApp cluster RPC |
7813 |
NetApp cluster RPC |
7814 |
NetApp cluster RPC |
7815 |
NetApp cluster RPC |
7816 |
NetApp cluster RPC |
7817 |
NetApp cluster RPC |
7818 |
NetApp cluster RPC |
7819 |
NetApp cluster RPC |
7820 |
NetApp cluster RPC |
7821 |
NetApp cluster RPC |
7822 |
NetApp cluster RPC |
7823 |
NetApp cluster RPC |
7824 |
NetApp cluster RPC |