Ports 3307 and 13307 Showing As Filtered In Networking Tools Page

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When using the Privileged Access Manager (PAM) Cluster Deployment Requirements and Guidelines documentation page to configure a new cluster or add a new cluster member, a port scan lists 3307 and 13307 as FILTERED. It has been confirmed that there is no network firewall blocking the communication and a network trace confirms that packets reach the PAM appliance. Why are the ports showing as FILTERED?

Cause

PAM appliances have a local firewall configuration to only allow communication over ports 3307 and 13307 from other appliances within the cluster. Communication from any other IPs will be filtered.

Resolution

PAM is working as expected in order to protect these ports to any source that is not a cluster member. If networking traces are successful outside of the PAM Networking Tools page, then the ports will be open once the cluster is started or the new appliance is added to the active cluster.

Additional Information

To speak with a customer representative or a Support Engineer, see Contact Support. Scroll to the bottom of the page and click on your respective region.