- Preface
- Network Deployments in Cisco ISE
- Cisco SNS-3400 Series Appliances
- Installing and Configuring a Cisco SNS-3400 Series Appliance
- Installing Release 1.2 Software on a VMware Virtual Machine
- Installing Release 1.2 Software on Cisco ISE 3300 Series, Cisco NAC, and Cisco Secure ACS Appliances
- Managing Administrator Accounts
- Performing Post Installation Tasks
- Installing the Cisco SNS-3400 Series Appliance in a Rack
- Cisco SNS-3400 Series Server Specifications
- Cisco SNS-3400 Series Appliance Ports Reference
- Cisco ISE Licenses
- Certificate Management in Cisco ISE
- Index
Cisco Identity Services Engine Hardware Installation Guide, Release 1.2
- Updated:
- February 22, 2017
Chapter: Cisco SNS-3400 Series Appliance Ports Reference
Cisco SNS-3400 Series Appliance Ports Reference
This appendix lists the TCP and User Datagram Protocol UDP ports that Cisco ISE uses for intranetwork communications with external applications and devices.
Table C-1 lists the ports by TCP and UDP port number, identifies the associated feature, service, or protocol, and describes any specific port-related information that applies to the four Gigabit Ethernet ports: GbEth0, GbEth1, GbEth2, and GbEth3. The Cisco ISE ports listed in this table must be open on the corresponding firewall. The ports list provides information that can be useful when configuring a firewall, creating access control lists (ACLs), and configuring services on a Cisco ISE network.
- Cisco ISE management is restricted to Gigabit Ethernet 0.
- RADIUS listens on all network interface cards (NICs).
- All NICs can be configured with IP addresses.
|
|
|
|
|
|
|
|---|---|---|---|---|---|
Note Port 80 is redirected to port 443 (not configurable). Note Ports 80 and 443 support Admin web applications and are enabled by default. |
|||||
|
(Admin user interface authentication and endpoint authentication) |
|||||
|
|||||
|
Note By default, TCP: 80 is redirected to TCP: 8443. See Web Portal Services: Guest Portal and Client Provisioning.
|
|||||
|
|||||
|
|||||
|
Note This port is configurable. Note This port is configurable.
Note This port is route table dependent. |
|||||
| Note Inline Posture node High Availability does not apply to any other Cisco ISE node types. |
|||||
|
1.Because Inline Posture nodes do not support the Administration persona, they will not have access to this port. 2.NMAP OS Scan uses ports 0.65535 to detect endpoint operating system |
Ports to be Used for OCSP and CRL
For the Online Certificate Status Protocol services (OCSP) and the Certificate Revocation List (CRL), the ports are dependent on the CA Server or service hosting OCSP/CRL although the Cisco ISE Services and ports table above lists basic ports that are used in Cisco ISE.
For the OCSP, the default ports that can be used are TCP 80/ TCP 443. Cisco ISE admin portal expects http-based URL for OCSP services, and so, TCP 80 would be the default. You can also use non-default ports.
For the CRL, the default protocols include HTTP, HTTPS, and LDAP and the default ports would naturally be 80, 443, and 389 respectively. The actual port is contingent on the CRL server.
For more information, see OCSP Services and Certificate Store Edit Settings
Feedback