Kron PAM Inbound Ports

kron pam users can connect kron pam modules from the ports below these ports must be open for end users database replication ports must also be open to provide high availability note that all ports below must be open for kron end users and vpn users table of kron pam inbound port legend includes all kron pam modules please configure your environment based on the modules that your platform includes kron pam inbound port legend service name port number source destination comments kron pam web gui 443 / tcp end user kron pam instances these ports are used to access the web gui of kron pam mobile application notification 9080 / tcp 9443 / tcp end user mobile app kron pam instances end user’s mobile app will use these ports to communicate kron pam kron pam ssh proxy 2222 / tcp end user kron pam instances end users will use kron pam’s ssh proxy via these ports ( users can connect 2222 port of kron pam via an ssh client to use kron pam ssh proxy ) kron pam s/ftp proxy 3333 / tcp end user kron pam instances end users will use kron pam’s s/ftp proxy via these ports platform’s ssh / sftp 22 / tcp authorized users authorized users (system admins, support engineers) kron pam instances this port is used to access to cli of the device on which kron pam is installed kron pam sql proxy 5000 / tcp and different ports based on sql proxy configuration end user kron pam instances end users will use kron pam’s sql proxy via these ports kron pam http/s proxy 7080 / tcp end user kron pam instances end users will use kron pam’s http/s proxy via this port tacacs 49 / tcp 49 / udp end point / device kron pam instances end point/device will use kron pam’s tacacs module via this port database replication 31417 / tcp between kron pam instances (n to n) between kron pam instances (n to n) these ports are used to provide replication between instances database 5444 / tcp authorized users authorized users (system admins, support engineers) kron pam instances these ports are used to access the kron pam database you can check whether a port is open for an end user on a windows platform by running the following powershell command this command tries to establish a connection from the ip address of end users to the related port of the kron pam instance checking the port connectivity ps c \users\myuser> test netconnection \<kron pam ip> p \<desired port> successful connection example ps c \users\myuser> test netconnection test netconnection x x x x p 443 computername x x x x remoteaddress x x x x remoteport 443 interfacealias ethernet 6 sourceaddress s s s s tcptestsucceeded true failed connection example you can see a sample of failed connection output tcptestsucceeded column is false for failed conditions ps c \users\myuser> test netconnection test netconnection x x x x p 443 warning tcp connect to (x x x x 443) failed warning tcp connect to (x x x x 443) failed computername x x x x remoteaddress x x x x remoteport 443 interfacealias ethernet 6 sourceaddress s s s s pingsucceeded false pingreplydetails (rtt) 0 ms