Applies to:

Web Security Gateway and Web Security Gateway Anywhere, v7.5 - 7.8

Note  Inbound ports that also connect outbound to the internet are notated by an asterisk (*).

Ports	Direction	Protocol	Description
*21	Inbound	TCP	Transparent proxy FTP traffic
22	Inbound	TCP	SSH port, used for command-line access
53 5353	Inbound	UDP	Used for DNS communication
*80	Inbound	TCP	Transparent proxy HTTP traffic
88	Outbound	TCP/UDP	Kerberos
139	Outbound	TCP	(v7.7) Legacy NTLM
389	Outbound	TCP/UDP	LDAP
*443	Inbound	TCP	Transparent proxy HTTPS traffic
445	Outbound	TCP	IWA &NTLM
1080	Inbound	TCP	SOCKS
1812	Outbound	UDP	RADIUS
2048	Inbound	UDP	Transparent proxy using WCCP
2121	Inbound	TCP	Explicit proxy FTP traffic
3130	Inbound	UDP	Internet Cache Protocol (ICP) port used to enable a cache hierarchy.
3286	Outbound	TCP/UDP	Secure LDAP
8070	Inbound	TCP	Reserved for transparent proxy HTTPS traffic
8080	Inbound	TCP	Explicit proxy HTTP and HTTPS traffic
8081	Inbound	TCP	Content Gateway Manager HTTP port
8089	Inbound	UDP	(v7.7) SNMP encapsulation
9447	Outbound	TCP	Appliance manager administrator access
15868	Inbound	TCP	Filtering Service communication (WISP)
40000	Inbound	TCP	Policy Server (negotiate encryption)
55806	Inbound	TCP	Policy Server (configuration exchange)
55826	Inbound	TCP	Policy Server (callback)
55829	Inbound	TCP	WTG app
55880	Inbound	TCP	Policy Broker (policy information exchange)
55905	Inbound	UDP	UID broadcast

Ports	Direction	Description
8082	Inbound	(v7.7) Clustering statistics gathering
8083	Inbound	Autoconfiguration for clustering (PAC file)
8084	Inbound	Process manager for clustering
8085	Inbound	(v7.7) Logging server for clustering
8086	Inbound	(v7.7) Enables clustering
8087	Inbound	Reliable service for clustering
8088	Inbound	Multicast for clustering

Ports	Direction	Protocol	Description
17500	Inbound + Outbound	TCP	Date Security configuration
17501	Inbound + Outbound	TCP	Reserved for Data Security configuration
17502	Inbound + Outbound	TCP	Reserved for Data Security configuration
17503	Inbound + Outbound	TCP	Data Security remote analysis
17504	Inbound + Outbound	TCP	Reserved for Data Security remote analysis
17505	Inbound + Outbound	TCP	Data Security fingerprint detection
17506	Inbound + Outbound	TCP	Reserved for Data Security fingerprint detection
17507	Inbound + Outbound	TCP	Reserved for Data Security configuration
17508	Inbound + Outbound	TCP	Reserved for Data Security configuration
17509	Inbound + Outbound	TCP	Reserved for Data Security configuration
17510	Inbound + Outbound	TCP	Reserved for Data Security
17511	Inbound + Outbound	TCP	Reserved for Data Security
17512	Inbound + Outbound	TCP	Data Security OCR
17513	Inbound + Outbound	TCP	Reserved for Data Security remote analysis
17514	Inbound + Outbound	TCP	Reserved for Data Security

Ports	Protocol	Description
21	TCP	Transparent proxy FTP traffic
22	TCP	SSH port, used for command-line access
53 5353	UDP	Used for DNS communication
80	TCP	Transparent proxy HTTP traffic
443	TCP	Transparent proxy HTTPS traffic
2048	UDP	Transparent proxy using WCCP
2121	TCP	Explicit proxy FTP traffic
3130	UDP	Internet Cache Protocol (ICP) port used to enable a cache hierarchy.
8070	TCP	(Version 7.5 only) Explicit proxy HTTPS traffic
8071	TCP	Content Gateway Manager SSL port
8080	TCP	(v7.5) Explicit proxy HTTP traffic (v7.6) Explicit proxy HTTP and HTTPS traffic
8081	TCP	Content Gateway Manager HTTP port
8089	UDP	SNMP encapsulation
8090	TCP	HTTPS outbound (between Content Gateway and the SSL outbound proxy)
9447	TCP	Appliance Manager administrator access
15868	TCP	Filtering Service communication (WISP)
30900	TCP	Download service
40000	TCP	Policy Server (negotiate encryption)
55806	TCP	Policy Server (configuration exchange)
55880	TCP	Policy Broker (policy information exchange)
55905	UDP	UID broadcast
Random (1024 - 65535)	TCP	(Version 7.5) Establish communication with off-box Policy Server

Ports	Description
8082	Clustering statistics gathering
8083	Autoconfiguration for clustering (PAC file)
8084	Process manager for clustering
8085	Logging server for clustering
8086	Enables clustering
8087	Reliable service for clustering
8088	Multicast for clustering

Ports	Protocol	Description
5819	TCP	Data Security fingerprint detection
5820	TCP	Data Security fingerprint synchronization
5821 5822 5823	TCP	Data Security fingerprint configuration
8880	TCP	Data Security configuration
8888 8889	TCP	Data Security deployment and system health information
8892	TCP	Data Security system logging
9080 9081	TCP	Data Security statistics and system health information
9090 9091	TCP	Data Security diagnostics
18303	TCP	Data Security local analysis
18404	TCP	Data Security remote analysis