A network administrator is setting up ingress firewall rules for a central management server. The server must receive remote system log messages from network switches and perform encrypted directory queries against an enterprise domain controller. Which of the following port and protocol combinations should be permitted on the firewall? (Select TWO).
- UDP port 514Answer
- TCP port 636Answer
- CTCP port 389
- DUDP port 67
Answer
The firewall rules must permit UDP port 514 for Syslog logging and TCP port 636 for LDAPS encrypted directory queries.
Centralized logging applications rely on the Syslog protocol running over UDP port 514. Secure directory services (LDAPS) encrypt communication over TLS/SSL on TCP port 636. Therefore, allowing UDP port 514 and TCP port 636 satisfies both firewall requirements.
Step-by-Step Solution
Key Concept
Standard Network Service Ports (Syslog and LDAPS)