List of Tufin Predefined Services

The names and details of the services that are predefined in TOS are listed by protocol.

TCP Services

The names of the predefined TCP services in TOS are:

Service Name

Port Range

Comment

AOL

5190

AOL Instant Messenger. Also used by: ICQ & Apple iChat

AP-Defender

2626

Defender Authentication service

AT-Defender

2626

Defender Authentication service

BGP

179

Border Gateway Protocol

Citrix_ICA

1494

Citrix ICA general Service.

CP_Exnet_PK

18262

Check Point Extranet public key resolution

CP_Exnet_resolve

18263

Check Point Extranet remote objects resolution

CP_redundant

18221

Check Point Redundant Management Protocol

CP_reporting

18205

Check Point Reporting Client Protocol

CP_rtm

18202

Check Point Real Time Monitoring

CP_seam

18266

Check Point Eventia Analyzer Server Protocol

CP_SmartPortal

4433

Check Point Smart Portal

CP_SSL_Network_Extender

444

SSL Network Extender port

CPD

18191

Check Point Daemon Protocol

CPD_amon

18192

Check Point Internal Application Monitoring

CPMI

18190

Check Point Management Interface

daytime-tcp

13

Daytime Server Protocol (TCP)

discard-tcp

9

Discard Server Protocol (TCP)

domain-tcp

53

Domain Name System Download

echo-tcp

7

Echo Protocol (TCP)

EDGE

981

VPN-1 UTM Edge Portal

Entrust-Admin

710

Entrust CA Administration Service

Entrust-KeyMgmt

709

Entrust CA Key Management Service

epmap-tcp

135

RPC Endpoint Mapper

exec

512

Remote execution (rexec)

FIBMGR

2010

Forwarding Information Base Manager - Dynamic Routing Cluster config

finger

79

UNIX

ftp

21

File Transfer Protocol

FW1

256

Check Point Security Gateway Service

FW1_amon

18193

Check Point OPSEC Application Monitoring

FW1_clntauth_http

900

Check Point Security Gateway Client Authentication (HTTP)

FW1_clntauth_telnet

259

Check Point Security Gateway Client Authentication (Telnet)

FW1_CPRID

18208

Check Point Remote Installation Protocol

FW1_cvp

18181

Check Point OPSEC Content Vectoring Protocol

FW1_ela

18187

Check Point OPSEC Event Logging API

FW1_ica_mgmt_tools

18265

Check Point Internal CA Management Tools

FW1_ica_pull

18210

Check Point Internal CA Pull Certificate Service

FW1_ica_push

18211

Check Point Internal CA Push Certificate Service

FW1_ica_services

18264

Check Point Internal CA Fetch CRL and User Registration Services

FW1_key

265

Check Point VPN-1 Public Key Transfer Protocol

FW1_lea

18184

Check Point OPSEC Log Export API

FW1_log

257

Check Point Security Gateway Logs

FW1_mgmt

258

Check Point Management (Version 4.x)

FW1_netso

19190

Check Point User Authority simple protocol

FW1_omi

18185

Check Point OPSEC Objects Management Interface

FW1_omi-sic

18186

Check Point OPSEC Objects Management Interface with Secure Internal Communication

FW1_pslogon

18207

Check Point Policy Server Logon protocol

FW1_pslogon_NG

18231

Check Point NG Policy Server Logon protocol

FW1_sam

18183

Check Point OPSEC Suspicious Activity Monitor API

FW1_sds_logon

18232

Check Point SecuRemote Distribution Server Protocol

FW1_sds_logon_NG

65524

SecuRemote Distribution Server Protocol (VC and higher)

FW1_snauth

261

Check Point Security Gateway Session Authentication

FW1_topo

264

Check Point VPN-1 SecuRemote Topology Requests

FW1_uaa

19191

Check Point OPSEC User Authority API

FW1_ufp

18182

Check Point OPSEC URL Filtering Protocol

gopher

70

The Internet Gopher Protocol

GoToMyPC

8200

Remote Computer Access & Sharing application

H323

1720

videoconference transmissions over IP networks

http

80

Hypertext Transfer Protocol

HTTP_and_HTTPS_proxy

8080

 

https

443

HTTP protocol over TLS/SSL

ident

113

Identify RCS keyword strings in files

IKE-tcp

500

IPSEC Internet Key Exchange Protocol over TCP

imap

143

Interactive Mail Access Protocol

IMAP-SSL

993

SSL encrypted IMAP

IPSO_Clustering_Mgmt_Protocol

1111

used for distributing configuration changes among cluster members and cluster wide monitoring

irc2

7000

Internet Relay Chat Protocol

Kerberos_v5_TCP

88

Kerberos authentication protocol (version 5)

ldap

389

Lightweight Directory Access Protocol

ldap-ssl

636

Lightweight Directory Access Protocol over TLS/SSL

login

513

Remote login (rlogin)

lotus

1352

Lotus iNotes Web Access Protocol

lpdw0rm

515

Also used by: Ramen trojan and printer service.

microsoft-ds

445

Microsoft CIFS over TCP

MS-SQL-Monitor

1434

Microsoft SQL Monitor

MS-SQL-Server

1433

Microsoft SQL Server

MSNP

1863

MSN Messenger

MySQL

3306

 

nbsession

139

NetBios Session Service

NCP

524

Novell NetWare Core Protocol

netshow

1755

Microsoft NetShow (Windows Media Player)

netstat

15

UNIX netstat Protocol

nfsd-tcp

2049

Network File System Daemon over TCP

nntp

119

Network News Transfer Protocol

ntp-tcp

123

Network Time Protocol (TCP)

OAS-NameServer

2649

Oracle Application Server (IIOP) NameServer

OAS-ORB

2651

Oracle Application Server (IIOP) ORB

pcANYWHERE-data

5631

PCs remote access security software

pcTELECOMMUTE-FileSync

2299

Symantec pcTELECOMMUTE File Synchronization

pop-2

109

Post Office Protocol - Version 2

pop-3

110

Post Office Protocol - Version 3

POP3S

995

SSL protocol over POP3S

PostgreSQL

5432

PostgreSQL database server

pptp-tcp

1723

Point-to-Point Tunneling Protocol

RainWall_Command

6374

RainWall high availability daemon

Real-Audio

7070

RealNetworks PNA Protocol

RealSecure

2998

Automatic 'Suspicious Activity Monitoring' activator

Remote_Debug

8787

 

Remote_Desktop_Protocol

3389

Microsoft RDP

rtsp

554

Real Time Streaming Protocol

SCCP

2000

Skinny Call Control Protocol

securidprop

5510

Token based Authentication service (TCP)

shell

514

Remote shell (rsh)

sip_tls

5061

Session Initiation Protocol over non-encrypted Transport Layer Security

sip-tcp

5060

Session Initiation Protocol over TCP

smtp

25

Simple Mail Transfer Protocol

SMTPS

465

SSL protocol over SMTPS

sqlnet1-2

1521

Oracle SQL*Net Version 1 and 2

sqlnet2-1525

1525

Oracle SQL*Net Version 2 Services

sqlnet2-1526

1526

Oracle SQL*Net Version 2 Services

Squid_NTLM

3128

Squid NTLM authentication

ssh

22

secure shell

StoneBeat-Control

3002

Stonesoft StoneBeat Control

StoneBeat-Daemon

3001

Stonesoft StoneBeat Daemon Heartbeat

T.120

1503

H323

TACACSplus

49

Terminal Access Controller Access Control System over TCP

tcp-high-ports

>1023

TCP Ports 1024-65535

telnet

23

Telnet Protocol

time-tcp

37

Time Server Protocol (TCP)

UserCheck

18300

Check Point Daemon Protocol

uucp

540

Unix-to-Unix Copy Program

wais

210

Wide Area Information Servers

X11

6000-6063

X Window System

Yahoo_Messenger_messages

5050

Yahoo Messenger messages

Yahoo_Messenger_Voice_Chat_TCP

5000-5001

Yahoo Messenger Voice Chat

Yahoo_Messenger_Webcams

5100

Yahoo Messenger Webcams video

UDP Services

The names of the predefined UDP services in TOS are:

Service Name

Port Range

Comment

biff

512

UNIX biff Protocol

bootp

67

Bootstrap Protocol Server

Citrix_ICA_Browsing

1604

UDP Service for general Citrix browsing

daytime-udp

13

Daytime Server Protocol (UDP)

dhcp

68

DHCP

discard-udp

9

Discard Server Protocol (UDP)

domain-udp

53

Domain Name System Queries

E2ECP

18241

Check Point End to End Control Protocol

echo-udp

7

Echo Protocol (UDP)

epmap-udp

135

RPC Endpoint Mapper

FW1_load_agent

18212

Check Point ConnectControl Load Agent

FW1_scv_keep_alive

18233

Check Point SecureClient Verification Keepalive Protocol

FW1_snmp

260

Check Point Security Gateway SNMP Agent

H323_ras

1719

RAS and associated connections (H.323 protocols)

Hotline_tracker

5499

Hotline tracker connections

ICQ_locator

4000

Mirabilis ICQ versions

IKE

500

IPSEC Internet Key Exchange Protocol (formerly ISAKMP/Oakley)

IKE_NAT_TRAVERSAL

4500

Nat Traversal Protocol

Kerberos_v5_UDP

88

Kerberos authentication protocol (version 5)

kerberos-udp

750

secure method for authenticating a request for service

L2TP

1701

Layer 2 Tunneling Protocol

ldap-udp

389

LDAP udp service

MetaIP-UAT

5004

Check Point Meta IP UAM Client-Server Communication

mgcp_CA

2727

Media Gateway Control Protocol - Call-Agent port

mgcp_MG

2427

Media Gateway Control Protocol - Media Gateway port

microsoft-ds-udp

445

Microsoft CIFS over UDP

MS-SQL-Monitor_UDP

1434

Microsoft-SQL-Monitor_UDP

MS-SQL-Server_UDP

1433

Microsoft SQL Server

MSN_Messenger_1863_UDP

1863

Microsoft Network Messenger UDP

MSN_Messenger_5190

5190

Microsoft Network Messenger

MSN_Messenger_Voice

6901

Microsoft Network Messenger Voice communication

name

42

Host Name Server

nbdatagram

138

NetBios Datagram Service

nbname

137

NetBios Name Service

NEW-RADIUS-ACCOUNTING

1812

NEW - Remote Authentication Dial-In User Service

NEW-RADIUS-ACCOUNTING

1813

NEW - Remote Authentication Dial-In User Service accounting

nfsd

2049

Network File System Daemon over UDP (earlier versions of NFS)

ntp-udp

123

Network Time Protocol (UDP)

pcANYWHERE-stat

5632

PCs remote access security software

RADIUS

1645

Remote Authentication Dial-In User Service

RADIUS-ACCOUNTING

1646

Remote Authentication Dial-In User Service accounting

RainWall_Daemon

6372

RainWall daemons communication

RainWall_Status

6374

RainWall remote management status

RainWall_Stop

6373

RainWall monitoring

RDP

259

Check Point VPN-1 FWZ Key Negotiations - Reliable Datagram Protocol

rip

520

Routing Information Protocol

RIPng

521

Routing Information Protocol for IPv6

securid-udp

5500

Token based Authentication service (UDP)

sip

5060

Session Initiation Protocol

snmp

161

Simple Network Management Protocol

SWTP_Gateway

9281

VPN-1 Embedded/SofaWare commands

SWTP_SMS

9282

VPN-1 embedded / SofaWare Management Server (SMS)

syslog

514

UNIX syslog Protocol

TACACS

49

Terminal Access Controller Access Control System over UDP

tftp

69

Trivial File Transfer Protocol

time-udp

37

Time Server Protocol (UDP)

tunnel_test

18234

Check Point tunnel testing application

udp-high-ports

>1023

UDP Ports 1024-65535

VPN1_IPSEC_encapsulation

2746

Check Point VPN-1 SecuRemote IPSEC Transport Encapsulation Protocol

wap_wdp

9200

Wireless Datagram Protocol: a simplified protocol suitable for low bandwidth mobile stations enables a connectionless mode.

wap_wdp_enc

9202

Wireless Datagram Protocol with Wireless Transport Layer Security

wap_wtp

9201

Wireless Transaction Protocol: a simplified protocol suitable for low bandwidth mobile stations enables a connection mode.

wap_wtp_enc

9203

Wireless Transaction Protocol with Wireless Transport Layer Security

who

513

UNIX who Protocol

ICMP Services

The names of the predefined ICMP services in TOS are:

Service Name

Type

dest-unreach

3

echo-reply

0

echo-request

8

info-reply

16

info-req

15

mask-reply

18

mask-request

17

param-prblm

12

redirect

5

source-quench

4

time-exceeded

11

timestamp

13

timestamp-reply

14

Other Services

The names of the other predefined services in TOS are:

Service Name

IP Protocol

Comment

AH

51

IPSEC Authentication Header Protocol

egp

8

Exterior Gateway Protocol

ESP

50

IPSEC Encapsulating Security Payload Protocol

FW1_Encapsulation

94

Check Point VPN-1 SecuRemote FWZ Encapsulation Protocol

ggp

3

Gateway-to-Gateway protocol

gre

47

Generic Route Encapsulation Protocol

icmp-proto

1

Internet Control Message Protocol

igmp

2

Internet Group Management Protocol

igrp

9

Cisco Interior Gateway Routing Protocol

IP_Mobility

55

IP Mobility protocol

ospf

89

Open Shortest Path First Interior GW Protocol

PIM

103

Protocol-Independent Multicast

SIT

41

IPv6 encapsulated in IPv4

Sitara

109

Sitara Networks Protocol (SpeedSeeker)

SKIP

57

IPSEC Simple Key Management for Internet Protocols

SUN_ND

77

Sun ND protocol

SWIPE

53

swIPe protocol

vrrp

112

Virtual Router Redundancy Protocol

other

0-255

for Service Names not listed above