My 501 Pix is Running 7.0(8) code, I have 3 Interfaces nIside DMZ & Outside. When I use an independent System to scan the DMZ and Outside interfaces, the result is that port 81 is open, even though It is not in the access list. I went through the config with a fine tooth comb and it (port 81) is not in any of the access lists. I am puzzled. Cisco PIX and ASA explicitly denies unless it manually opened via an access list. Can some please give me your opinion on this. I need to desperately close this hole, to keep out the unwanted worms and the like from spoiling my days and nights.
Thanks in advance.