Customer concern regarding port 25672 showing in vulnerability scans

[andrew_gjertsen · Accepted solution]

Description: Customer's stating that port 25672 is flagged during vulnerability scans while also regarding TLS 1.2 values is flagged as unsafe

Solution:  This has come up a few times this year and below are the solutions:

1. Per R&D, always upgrade to the latest and greatest version of Prognosis.  In a few case studies so far, the customer was on 11.6 P6 or below.  R&D recommended upgrading to  11.7,11.8 or higher at the time.  Reason being, these vulnerability scan issues tend to be addressed in latest Prognosis versions as the vulnerablity appears in the lower versions (11.6 or lower)
2. If the customer cannot upgrade for whatever reason, then only option is to block the port 25672 using local firewall as a solution