Port 2301 security issues

[Moe_5]

Enabling the Web agents service on a server will atoumatically enable access to port 2301 on the front end IP. This is a major security, Does anyone have an idea on how to resolve this??

[Ayman Altounji]

First, disable anonymous access on the web agents - this will prevent anybody from being able to see management data.
Second, change the passwords away from the default.

[Ayman Altounji]

Another thing that we did was set up security in zones using the firewall and using access lists on the access routers. Since only administrators should be accessing that data, it should be fairly easy to figure out which subnets and IP addresses are going to be needing access, and if you are running a server farm in similar subnets, it should be fairly simple to do this. Of course this does not keep IP spoofing away, but their is always a trade off when it comes to manageability vs. security.