Open ports

Bill Bird 2 months ago

Had a colleague port scan my WAN port after replacing my dead XG230 with a new XG230. I show all these open ports:

I did not have this issue with previous fw (my previous config would not load, sadly).

What am I missing?

Thanks ahead of time.

-b

Added TAGs
[edited by: Raphael Alganes at 4:20 AM (GMT -7) on 21 Aug 2024]

Top Replies

rfcat_vk 2 months ago in reply to Bill Bird +2 suggested

Hi, from your description you would appear to have an any any riule active. Please review logviwer to find which was allowing that traffic, also did you change the WAN access settings? Ian

0 Vivek Jagad 2 months ago

Hey Bill Bird ,

Thank you for reaching out to the community, do you have the backup of old XG 230 ? Have you backup restored or configured new for the new XG 230 ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bill Bird 2 months ago in reply to Vivek Jagad

Thanks for the reply.

No, the old config would not load.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 2 months ago in reply to Bill Bird

Do you receive any error which can share ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Bill Bird 2 months ago in reply to Vivek Jagad

No errors. This was just a simple external port scan of my WAN port from outside the network.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Vivek Jagad 2 months ago in reply to Bill Bird

You can create a WAN to LAN drop rule...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel
0 Bill Bird 2 months ago in reply to Vivek Jagad

Thanks, I did that. I'm wondering why this XG seems to be different. How can I close these ports so they're not visible at all?
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 rfcat_vk 2 months ago in reply to Bill Bird

Hi,

from your description you would appear to have an any any riule active.

Please review logviwer to find which was allowing that traffic, also did you change the WAN access settings?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +2 Vote Down

Sign in to reply

Verify Answer

Reject Answer

Cancel