Solved

PCI compliance is failing with error TCP 8443 pcsync-https SSL Certificate Cannot Be Trusted

Posted on 2013-12-09
2
1,621 Views
Last Modified: 2013-12-31
PCI compliance is failing with error TCP 8443 pcsync-https SSL Certificate Cannot Be Trusted.

What is port 8443 used for and is this open by default on Sonicwall firewalls? I don't recall opening up this port and all previous PCI compliance scans have passed successfully.  Is it safe to block port 8443 on the firewall if it is not being used for anything?
0
Comment
Question by:ptsolutionsinc
2 Comments
 
LVL 19

Expert Comment

by:xterm
Comment Utility
pcsync-https on 8443/tcp is much like https on 443/tcp except that it's for medium-strength encryption (between 56-112 bits)

Many software products use this port (Cisco Broadband Access Center is one of them)  I'm guessing you have the port open to allow access to a web interface, but I gather there is a hostname mismatch or something between what the certificate name is vs. the name that clients are accessing it by.
0
 
LVL 20

Accepted Solution

by:
rauenpc earned 250 total points
Comment Utility
xterm is most likely correct that the port is opened up for web management. The failed certificate can be for a couple reasons. If you access the webpage via IP address you will always have a certificate error. If you access the page via FQDN and you don't have a trusted certificate installed you will get this error.

For PCI compliance purposes, I would do one of two things. Either limit the source IP's allowed to access the web management page, or disable it from the outside altogether and require that admin users either be connected from the inside of the network or via VPN. This way PCI scans will not see the port as being open.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Imagine you have a shopping list of items you need to get at the grocery store. You have two options: A. Take one trip to the grocery store and get everything you need for the week, or B. Take multiple trips, buying an item at a time, to achieve t…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now