Cisco FirePOWER ASA 5500 series Configuration Manual page 908

Local Ports and Protocols
Table D-5
Literal
tacacs
talk
telnet
tftp
time
uucp
who
whois
www
xdmcp
Local Ports and Protocols
Table D-6
traffic destined to the security appliance. Unless you enable the features and services listed in
the security appliance does not open any local protocols or any TCP or UDP ports. You must configure
a feature or service for the security appliance to open the default listening protocol or port. In many cases
you can configure ports other than the default port when you enable a feature or service.
Table D-6
Feature or Service
DHCP
Failover Control
HTTP
HTTPS
ICMP
IGMP
ISAKMP/IKE
IPSec (ESP)
IPSec over UDP
(NAT-T)
IPSec over UDP
(Cisco VPN 3000
Series compatible)
IPSec over TCP
(CTCP)
Cisco Security Appliance Command Line Configuration Guide
D-14
Port Literal Values (continued)
TCP or UDP? Value
TCP, UDP 49
TCP, UDP 517
TCP 23
UDP 69
UDP 37
TCP 540
UDP 513
TCP 43
TCP 80
UDP 177
lists the protocols, TCP ports, and UDP ports that the security appliance may open to process
Protocols and Ports Opened by Features and Services
Protocol
UDP
108
TCP
TCP
1
2
UDP
50
UDP
UDP
TCP
Appendix D
Description
Terminal Access Controller Access Control System
Plus
Talk
RFC 854 Telnet
Trivial File Transfer Protocol
Time
UNIX-to-UNIX Copy Program
Who
Who Is
World Wide Web
X Display Manager Control Protocol
Port Number Comments
67,68 —
N/A —
80 —
443 —
N/A —
N/A Protocol only open on destination IP
address 224.0.0.1
500 Configurable.
N/A —
4500 —
10000 Configurable.
— No default port is used. You must specify
the port number when configuring IPSec
over TCP.
Addresses, Protocols, and Ports
Table D-6,
OL-10088-01