How to secure Sangfor ES Manager

Just want to check what's all your configurations.
Should we close this ports:
22, 80, 443, 8083 (all ports close)

And open 443, 4430 only?

Can you guys show your configurations. Just want to check how to secure EDR with internet and without using two EDR Manager.

Now Folks, the problem is that firewalld is not running, tried all possible ways, even reinstalling, unmasking, etc.

You guys have this issue? OR just leave firewalld? OR even you guys didn't do this kind?

If you don't need to use those ports, yes. If port 443 is the only port you use, you can provide it.

As a result, all ports will be closed, leaving just 443 for Manager Access and 4430 for Agent Access available.

And just use SSH for troubleshooting, correct?

If you do not host, you can block port 4430. You can either block or not block port 443, because the major purpose of port 443 is to redirect network traffic. The connection is substantially more secure using port 443, because the data is encrypted using SSL/TLS.

If you don't host, you can block port 4430. Since rerouting network traffic is port 443's primary function, you can choose whether to restrict it. The fact that data is encrypted using SSL/TLS on port 443 makes the connection significantly more safe.

You can block port 4430 if you don't host. You can decide whether to limit port 443 because its main purpose is to reroute network traffic. The connection is much more secure because data is encrypted using SSL/TLS on port 443.

If you don't host, you can block port 4430. Because port 443's primary function is to redirect network traffic, you can choose to restrict it or not. Since information is encrypted using SSL/TLS on port 443, the connection is substantially more secure.

You can block the port 4430 if you don't do hosting. For the port 443, you can either block it or not because port 443 main purpose is to divert network traffic. With port 443, the connection is much more secure as the information is encrypted through SSL/TLS

To study, thanks for your advice.

It is suggested to allow 443 for your connection to be more secure.