Sonic.net

Greetings,

We have a bunch of locations that require external scanning by our PCI vendor to remain compliant. About half of my locations are in bridge mode, the others are not. The sites that are in router mode are failing scans, saying that port 500001 is open. I need to close this port on my modems. I don't see how this is possible on the modem? Can anyone let me know what is running on 500001? I'm not running in DMZ but I am doing 2 port forwards, 5150 and 5160.

Model: 5268AC
Serial Number: 93171N092946
Hardware Version: 260-2173300
Software Version: 10.5.4.527511-sonic

Thanks,
rickd

Maybe this is related to the bug in the latest firmeware for the Pace 5286 modem? The bug definitely causes other issues with DMZ, DHCP, and speeds, so I wouldn't be surprised if it's somehow opening port 500001 as well.

I understand you can roll back to the previous firmware and it solves the other issues. Maybe test that on one of your modems?

Really wish Sonic would step up and give us a real response on this.

I thought port numbers run 0..65535?

Hi Rick,

Port 50001 is the remote management port we use for remote diagnostics and troubleshooting.

If you bridge the modem and install your own router/firewall behind it, that port will no longer appear in scans.

Some additional information about this is available in this older post here: viewtopic.php?f=8&t=5191&p=35122