topic Re: Panorama Management Port in General Topics

Panorama Management Port

chrisp — Mon, 12 Sep 2011 18:52:30 GMT

Is port TCP 3978 the only one required to manage the FW's from Panorama? Is this initiated in both directions? Does this include logging?

Thanks - Chris

mschuricht — Mon, 12 Sep 2011 19:44:26 GMT

The connection is initiated from the device to Panorama using SSL over TCP/3978.

This includes both management and logging info.

chrisp — Mon, 12 Sep 2011 20:48:44 GMT

So even if i initiate something from Panorama (e.g. policy push) it uses that connection?

mschuricht — Mon, 12 Sep 2011 21:34:22 GMT

Yes, there is communication back and forth over the tunnel, it is just initiated by the device.

chrisp — Tue, 13 Sep 2011 13:52:31 GMT

Thanks...This is helpful.

One last question. What port is used for the Panorama HA communications?

mschuricht — Tue, 13 Sep 2011 16:05:44 GMT

HA connectivity uses ports 28769/tcp and 49160/tcp with encryption enabled and 49960/tcp and 49969/tcp when encryption is not enabled.

BTW, we have added this info to the 4.1 admin guide so there will be a place to lookup the information in the future.