TCP Port 900 is used by FireWall-1’s HTTP Client Authentication mechanism.

FireWall-1 will only listen to this port on a firewall module. UDP Port 500 is used for ISAKMP key exchange between firewalls or between a firewall and a host running Secure Client. FireWall-1 will only listen to this port on a management console. TCP Port 264 is used for Secure Client (SecuRemote) build 4100 and later to fetch network topology and encryption keys from a FireWall-1 Management Console. This can be disabled by commenting out the line that contains netsod in $FWDIR/conf/nf. TCP Port 262 is used by netsod, which is the Single Sign-on Daemon. UDP Port 260 and UDP Port 161 are used for the SNMP daemon that Check Point FireWall-1 Provides. UDP Port 259 is used in FWZ encryption to manage the encrypted session (SecuRemote and FireWall-1 to FireWall-1 VPNs). TCP Port 259 is used for Client Authentication via telnet.

TCP Port 258 is used by the fwpolicy remote GUI. TCP Port 257 (FW1_log) is used for logging purposes. * When instaling a policy, the management console uses this port to push the policy to the remote firewall. * SecuRemote build 4005 and earlier uses this port to fetch the network topology and encryption keys from a FireWall-1 Management Console * Exchange of CA and DH keys in FWZ and SKIP encryption between two FireWall-1 Management Consoles TCP Port 256 is used for three important things: In the case of the SAM and LEA ports (see below), these ports require authentication in much the same way that remote management does, so it is not believed to be a security risk. If no policy is in place or the policy permits access to these ports inadvertenly, the processes themselves are smart enough to reject direct requests to these ports. In general, the services bound to these ports do not pose any sort of security risk. Typically, they intercept connections traversing through the firewall, but in order for this to work correctly, they must bind to their own port and listen. Various parts of FireWall-1 bind to various ports on the system.

Fortinet vpn client porst