Checking for open ports on Endpoint Detection and Response

Products

• Endpoint Detection and Response

Issue/Introduction

A vulnerability is found for a particular port in Endpoint Detection and Response (EDR), need to verify if that port is open in the environment and if it can be disabled if not required.

For example: AMQP TCP Protocol port 5671/5672 used for EDR Network Scanner which is not required when appliance is installed in Management platform Operating role.

Resolution

Please contact Broadcom Technical support to check on it as the supported command is not available with default admin login to EDR CLI (command-line interface).