Re: ssl telnet vs firewall

["Jacob Banda" <jnbanda@xxxxxxxxxx>]

You could try to explain to them that port 449 is a necessary port for
initial communication. It does not send any sensitive information. It is
used for redirecting the client to the appropriate ports depending on the
service being accessed. 

If they want all services to use TLS, then at the very least, you will need
the following ports:

REQUIRED PORTS NO MATTER WHAT SERVICE YOU ARE TRYING TO ACCESS (OVER
SSL/TLS)
Server Mapper (as-svrmap)		
TCP,449
License Management (as-central)	
TCP,9470
Remote Command (as-rmtcmd)		
TCP,9475
Signon Verification (as-signon)		
TCP,9476

ADDITIONAL PORT FOR TELNET (OVER TLS)
Telnet			
TCP,992


------------
Jacob
------------

-----Original Message-----
date: Thu, 6 Jan 2022 19:17:34 +0000
from: Miguel Peralta <mperalta8@xxxxxxxxxxx>
subject: Re: ssl telnet vs firewall

Hello, i try to convencing, server mapper cannot figures in the list of SSL
ports,and they are being picky about it,  thanks and reggards

________________________________
De: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> en nombre de Justin
Taylor <jtaylor.0ab@xxxxxxxxx>
Enviado: jueves, 6 de enero de 2022 01:02 p. m.
Para: MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>
Asunto: Re: ssl telnet vs firewall

The note at the bottom of your link my be important.  It mentions telnet and
449 specifically.

HTH


date: Thu, 6 Jan 2022 18:37:46 +0000
> from: Miguel Peralta <Mperalta8@xxxxxxxxxxx>
> subject: ssl telnet vs firewall
>
> Hello, I have a situation with the SSL telnet with iseries access for 
> windows, it is already configured and it works, but wanting to work in 
> a location that has a firewall does not work, according to the document:
>
>
> https://www.ibm.com/support/pages/tcpip-ports-required-ibm-i-access-an
> d-related-functions
>
> It only requires enabling the SSL ports, it has already been done but 
> still does not make a connection, what could be missing?
> Additionally, port 449 Server mapper is blocked, would this port be 
> necessary to add to the firewall policies?
>
> thanks greetings.
>
> PS: I cannot execute CWBPING due to security policies, all types of 
> ping are blocked
>
> [https://ipmcdn.avast.com/images/icons/icon-envelope-tick-green-avg-v1
> .png
> ]<
http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_camp
aign=sig-email&utm_content=webmail>
>    Libre de virus. www.avg.com<<http://www.avg.com<> 
> http://www.avg.com/email-signature?utm_medium=email&utm_source=link&ut
> m_campaign=sig-email&utm_content=webmail
> >
--