what all ports Panorama needs access to internal/internet

[Karthi_N]

-Currently we are not restrict any specific policy from panorama to any services hence we planned to restrict required destination and Port access . 

[TomYoung · Accepted solution]

Hi @Karthi_N ,

These are the 4 protocol/ports that I see being used on my production Panorama:

Port tcp/443 is used by numerous applications in addition to paloalto-updates.  All of these are listed in the 2 documents below.  BTW,  I use AIOps and not CDL.  AIOps is probably using tcp/444 even though it is not documented below.

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/reference-port-num...

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/firewall-administration/reference-port-nu...

Thanks,

Tom