PDQ using TCP Port 49220

Follow

Brett L

• July 22, 2019 15:41

We are throwing firewall blocks for PDQ on port 49220. The PDQ server is reaching out to member servers. PDQ Server (Source port 54249) Member Server (Destination Port 49220)

I did not see this port in the documentation. What is this for?

Thank you.

0

• 

  Colby Bouma

  • July 22, 2019 15:51

  Does your log show what the protocol is (SMB, FTP, etc)? I've never seen our products use that port.

  0

  Comment actions Permalink
• 

  Brett L

  • July 22, 2019 16:14

  It happens when running an inventory scan. TCP 49220. 3 blocked attempts during a scan

  0

  Comment actions Permalink
• 

  Colby Bouma

  • July 22, 2019 16:30

  I just ran Wireshark on my machine and performed a scan. I do not see any traffic on port 49220.

  Please capture a scan with Wireshark and send it to support@pdq.com, along with your firewall logs.

  0

  Comment actions Permalink

Please sign in to leave a comment.