Web Gateway Port requirements

[hugo2069]

Good day all,

We have a cluster of three gateways.  We would like to make our firewall rules more explicit and need to know what the port requirements for the Web Gateway are? I already have the information from the following KB (https://kc.mcafee.com/corporate/index?page=content&id=KB86010) but we see traffic from the MWG to endpoints on high ports (1023>).  Is that communication needed or can we block it?

Thanks in advance.

[asabban · Accepted solution]

Hello,

there are two connections for every HTTP request:

Client (High Port) initiates connection to MWG on port 9090

and 

MWG (High Port) initiates connection to Web Server on port 80/443

In both cases the high ports > 1024 are required.

There is no connection initiated from MWG to the endpoint on > 1024 usually.

Best,
Andre