Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

PDQ using TCP Port 49220

blombardo

July 22, 2019 15:41

We are throwing firewall blocks for PDQ on port 49220. The PDQ server is reaching out to member servers. PDQ Server (Source port 54249) Member Server (Destination Port 49220)

I did not see this port in the documentation. What is this for?

Thank you.

Comments

3 comments

Colby Bouma
July 22, 2019 15:51

Does your log show what the protocol is (SMB, FTP, etc)? I've never seen our products use that port.

0
blombardo
July 22, 2019 16:14

It happens when running an inventory scan. TCP 49220. 3 blocked attempts during a scan

0
Colby Bouma
July 22, 2019 16:30

I just ran Wireshark on my machine and performed a scan. I do not see any traffic on port 49220.

Please capture a scan with Wireshark and send it to support@pdq.com, along with your firewall logs.

0