topic Re: Ports Used for Paloalto in General Topics

Ports Used for Paloalto

CHOE-KyungJun — Wed, 30 Nov 2022 05:35:48 GMT

Dear Team,

First of all, I checked the 'port number usage' provided by paloalto.

URL : https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/reference-port-number-usage

However, port information related to 28777, 20077, 47631, and 20177 cannot be checked.

It seems to be the port used by dp0 and mgmt when executing commands in my lab.

If anyone knows information about the above 4 ports, please share with me.

Thanks in advance,
Kyungjun,

Re: Ports Used for Paloalto

kiwi — Wed, 30 Nov 2022 08:38:22 GMT

Hi @CHOE-KyungJun ,

Since they are not documented my guess is these are proprietary and internal ports on which different daemons/processes communicate.

That being the case my next step would be to contact your sales engineer or TAC for confirmation.

Kind regards,

-Kiwi.

Re: Ports Used for Paloalto

reaper — Wed, 30 Nov 2022 09:13:17 GMT

Those are ports used by the backplane fabric so the management plane and dataplane (and in larger chassis the control plane) can communicate with each other. They're purely used internally

Re: Ports Used for Paloalto

jasonroy — Wed, 11 Jun 2025 21:38:19 GMT

Add tcp6/7759 and tcp6/20277, these two plus tcp6/20177 are processes owned by gpsvc as of 10.2.x.

You can use the following command to find ports and their associated processes that are listening: