Cisco C220 M3 Setup page 7

Server Setup
Clean Interface Inbound
Source
User Subnet
User Subnet
User Subnet
User Subnet
Admin Interface Outbound (Optional)
The following depends on what services are configured.
Source
Admin
Interface
Admin Interface Inbound
Source
Admin
Subnet
Admin
Subnet
Admin
Subnet
Dirty Interface for Non Cisco-Validated/Recommended Deployment
Source
Dirty
Interface
Dirty
Interface
Dirty
Interface
Destination Protocol
Clean Interface TCP
Clean Interface TCP
Clean Interface TCP
Clean Interface TCP
Destination Protocol
NFSv4 Server TCP
Destination Protocol
Admin Interface TCP
Admin Interface TCP
Admin Interface TCP
Destination Protocol
Internet TCP
Internet TCP/UDP
Internet UDP
Port Action Note
22 Allow Allow SSH conectivity to the
tgsh-dialog.
80 Allow Appliance API and Threat
Grid user interface. This will
redirect to HTTPS TCP/443.
443 Allow Appliance API and Threat
Grid user interface.
9443 Allow Allow connectivity to the
Threat Grid UI Glovebox.
Port Action Note
2049 Allow Optional, only required if
Threat Grid appliance is
configured to send backups to
an NFSv4 share.
Port Action Note
22 Allow Allow SSH connectivity to the
TGSH Dialog.
80 Allow Allow Access to the OpAdmin
Portal interface. This will
redirect to HTTPS TCP/443.
443 Allow Allow Access to the OpAdmin
Portal interface.
Port Action Note
22 Allow Update, support snapshot, and
licensing services.
53 Allow Allow outbound DNS.
123 Allow Allow outbound NTP.
Firewall Rules
Server Setup
7