Opening ports in FW for the AP CW9172I-CFG

[shlomoi]

Hi

I'm trying to figure out which ports need to be opened in our FW for the APS CW9172I-CFG.

The dashboard shows a large number of ports and my client is afraid to open unsecured ports.
Are all the ports that appear in the dashboard really necessary,
443 is fine

do I need these too ?
80 ?
7734?
7351 ?
7752?

123?

Thanks

[RaphaelL]

Yes.

[PhilipDAth · Accepted solution]

With modern firmware:

* tcp/443 (HTTPS) is used for all cloud communications

* tcp/80 (HTTP) is needed for retrieving CRLs for checking certificates

* udp/123 (NTP) is needed for time synchronisation - although I think most devices now synchronise over the 443 tunnel.

I don't think 7734, 7351, and 7752 are really needed anymore, but they are used for backup comms in case something goes wrong.  Not having those may limit the ability of the network to repair should an adverse event happen.

[shlomoi]

Thanks