what all ports Panorama needs access to internal/internet

Karthi_N — Mon, 15 Jan 2024 16:11:45 GMT

-Currently we are not restrict any specific policy from panorama to any services hence we planned to restrict required destination and Port access .

Re: what all ports Panorama needs access to internal/internet

TomYoung — Tue, 16 Jan 2024 00:40:53 GMT

Hi @Karthi_N ,

These are the 4 protocol/ports that I see being used on my production Panorama:

Port tcp/443 is used by numerous applications in addition to paloalto-updates. All of these are listed in the 2 documents below. BTW, I use AIOps and not CDL. AIOps is probably using tcp/444 even though it is not documented below.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/reference-port-number-usage/ports-used-for-management-functions

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/reference-port-number-usage/ports-used-for-panorama

Thanks,

Tom

topic what all ports Panorama needs access to internal/internet in Panorama Discussions

what all ports Panorama needs access to internal/internet

Re: what all ports Panorama needs access to internal/internet