Section 16.146 Security Infrastructure: Ports and Protocols Flashcards
Objective 3.2 Given a scenario, you must be able to apply security principles to secure enterprise architecture. Objective 4.5 Given a scenario, you must be able to modify enterprise capabilities to enhance security
Security Infrastructure
Encompasses hardware, software, networks, data, and policies working cohesively to protect information
Ports and Protocols
Port
Logical communication endpoints on a computer or server
Example: Running a secure web server thats used for running e-commerce on your system you will have port 443 open listening for any inbound requests from your potential visitors
Port Classification
Inbound
Logical communication opening on a server that is listening for a connection from a client
○ Listening for connections
Open port waiting for someone to connect to it
Port Classification
Outbound
Logical communication opening created on a clinet in order to call out to a server for a connection
○ Used to connect to a server
If my computert is looking to make a connection to your web server over port 443 then my computer is going to open up a random high port numberr like 52363 and make an outbound request to web server port 443
Port Classification
Well-Known Ports (0-1023)
0-1023
Assigned by Internet Assigned Numbers Authroity (IANA), commonly-used protocols
Web browsing: HTTPS 443
Telnet: Port 23
Port Classification
Registered Ports (1024-49151)
1024-49151
Vendor-specific, registered with IANA
Microsift SQL server Port 1433
Microsoft Remote Desktop Protocol (RDP) 3389
Dynamic and Private Ports (49152-65535)
49152-65535
Temporary outbound connections
Ports that can be used by any application without being registered with IANA
Commonly used in gaming and instant messaging connections
Protocols
Rules governing device communication and data exchange between devices and systems
● HTTPS (port 443) uses the HTTPS protocol for secure web communication
Memorisation Tips
Memorise for each port the…
● Port number
● Default protocol
● Support for TCP or UDP connection
● Basic description of the port or protocol
PORT 21
■ File Transfer Protocol (FTP)
■ TCP
■ Used to transfer files from host to host
Port 22
■ Secure Shell Protocol (SSH), SCP, SFT.
■ TCP
■ Provides secure remote terminal access and file trasnfer capabilities. Provides Secure Copy Functions.
Provides Secure File Tranfers (SFTP)
Port 23
■ TELNET
■ TCP
■ Provides insecure remote control of another machine using a text based environment
its unencrypted and insecure so you should NOT be using it these days - exam questions may ask you about remote connections over port 23 and how to better secure it. ANSWER would be to close telnet and open an SSH port
Port 25
■ Simple Mail Transfer Protocol (SMTP)
■ TCP
■ Provides the ability to send emails over the network
PORT 53
■ Domain Name System (DNS)
■ TCP and UDP
■ Translates domain names in to IP addresses
Port 69
■ Trivial File Trasnfer Protocol (TFTP)
■ UDP
■ Used as a lightweight file transfer method for sending configuration files or network booting of an operational system
Port 80
■ Hypertext Transfer Protocol (HTTP)
■ TCP
■ Used for insecure web browsing
Port 88
■ Kerberos
■ UDP
■ Network authentication protocol
Port 110
■ Post Office Version Three Protocol (POP3)
■ TCP
■ Responsible for retrieving emails from a server
Port 119
■ Network News Transfer Protocol (NNTP)
■ TCP
■ Used for accessing newsgroups
Port 137
Port 138
Port 139
■ NetBIOS
■ TCP and DCP
■ Networking protocol suite
Used within a local windows environment used for things like printing
Port 135
■ Remote Procedure Call (RPC)
■ TCP and UDP
■ Facilitates communication between different system proceses
Often used with the windows file sharing system
Port 143
■ Instant Messaging Access Protocol (IMAP)
■ TCP
■ Allows access to email messages on a server
Port 161
■ Simple Network Management Protocol (SNMP)
■ UDP
■ Manages network devices
Port 162
■ SNMPTrap
■ UDP
■ Responsible for sending SNMP trap messages
Port 389
■ Lightweight Directory Access Protocol (LDAP)
■ TCP
■ Facilitates directory services
Port 443
■ HTTP Secure (HTTPS)
■ TCP
■ Provides secure web communication
Port 445
■ Server Message Block (SMB)
■ TCP
■ Used for file and pritner sharing over a network
Port 465
Port 587
■ SMTP Secure (SMTPS)
■ TCP
■ Provides secure SMTP communication
Port 514
■ SYSLOG
■ UDP
■ Used for sending log messages
Port 636
■ LDAP Secure (LDAPS)
■ TCP
■ LDAP communication over SSL/TLS
Port 993
■ IMAPS (IMAP over SSL/TLS)
■ TCP
■ Used for secure email retireval
Pro 995
■ Post Office Protocol Versoin 3 over SSL/TLS (POP3S)
■ TCP
■ Used for secure email retreival
Port 1433
■ Microsoft SQL
■ TCP
■ Used to facilitate communication with Microsoft SQL server
PORT 1645
PORT 1646
■ Radius TCP
■ TCP
■ Used for remote authentication, authorisation and accounting
Port 1812
Port 1813
■ Radius UDP
■ UDP
■ Used for authentication and accounting as defiend by the Interent Engineering Task Force (IETF)
Port 3389
■ Remote Desktop Protocol (RDP)
■ TCP
■ Enables remote desktop access
Port 6514
■ Syslog TLS
■ TCP
■ Used in secure syslog that uses SSL/TLS to encrypt the IP packets using a certificate before sending them across the IP network to the syslog collector
