Entrust nShield Connect Installation Manual page 13

The following table identifies the ports used by the nShield system components. All listed
ports are the default setting. Other ports may be defined during system configuration,
according to the requirements of your organization.
Component
Hardserver
Hardserver
Hardserver
Hardserver in
nShield Connect
Remote
Administration
Service
Audit Logging
syslog
If you are setting up an RFS or exporting a slot for Remote Operator functionality, you
need to open port 9004. You may restrict the IP addresses to those you expect to use
this port. You can also restrict the IP addresses accepted by the hardserver in the
configuration file. See the User Guide for your module and operating system for more
about configuration files. Similarly if you are setting up the Remote Administration
Service you need to open port 9005.
nShield® Connect Installation Guide
Default Use
Port
9000 Internal non-privileged connections from Java
applications including KeySafe
9001 Internal privileged connections from Java applications
including KeySafe
9004 Incoming impath connections from other hardservers,
e.g.:
• From a nShield Connect to the Remote File System
(RFS)
• From a non-attended nShield Connect to an
attended host machine when using Remote
Operator
9004 Incoming impath connections from client machines
9005 Incoming connections from Remote Administration
Clients
514 If you plan to use the Audit Logging facility with remote
syslog or SIEM applications, you need to allow outgoing
connections to the configured UDP port
13 of 73