Can someone explain to me why my TMG server would have all these open ports? Our security person was using NMAP to test this and found that these ports are open, many of them..... Since TMG has it's own firewall why wouldn't these be closed?
This is only a partial list, there are many more:
Starting Nmap 5.51 (http://nmap.org ) at 2012-11-06 13:57 Eastern Standard Time
Nmap scan report for 10.250.20.177
Host is up (0.00011s latency).
PORT STATE SERVICE
1/tcp open tcpmux
3/tcp open compressnet
4/tcp open unknown
6/tcp open unknown
7/tcp open echo
9/tcp open discard
13/tcp open daytime
17/tcp open qotd
19/tcp open chargen
20/tcp open ftp-data
21/tcp open ftp
22/tcp open ssh
23/tcp open telnet
24/tcp open priv-mail
25/tcp open smtp
26/tcp open rsftp
30/tcp open unknown
32/tcp open unknown
33/tcp open dsp
37/tcp open time
42/tcp open nameserver
43/tcp open whois
49/tcp open tacacs
53/tcp open domain
70/tcp open gopher
79/tcp open finger
80/tcp open http
81/tcp open hosts2-ns
82/tcp open xfer
83/tcp open mit-ml-dev
84/tcp open ctf
85/tcp open mit-ml-dev
88/tcp open kerberos-sec
89/tcp open su-mit-tg
90/tcp open dnsix
99/tcp open metagram
100/tcp open newacct
106/tcp open pop3pw
109/tcp open pop2
110/tcp open pop3
111/tcp open rpcbind
113/tcp open auth
119/tcp open nntp
125/tcp open locus-map
135/tcp open msrpc
139/tcp open netbios-ssn
143/tcp open imap
144/tcp open news
146/tcp open iso-tp0
161/tcp open snmp
163/tcp open cmip-man
179/tcp open bgp
199/tcp open smux
211/tcp open 914c-g
212/tcp open anet
222/tcp open rsh-spx
254/tcp open unknown
255/tcp open unknown
256/tcp open fw1-secureremote
259/tcp open esro-gen
264/tcp open bgmp
280/tcp open http-mgmt
301/tcp open unknown
306/tcp open unknown
311/tcp open asip-webadmin
340/tcp open unknown
366/tcp open odmr
389/tcp open ldap
406/tcp open imsp
407/tcp open timbuktu
416/tcp open silverplatter
417/tcp open onmux
425/tcp open icad-el
427/tcp open svrloc
443/tcp open https
444/tcp open snpp
445/tcp open microsoft-ds
458/tcp open appleqtc
464/tcp open kpasswd5
465/tcp open smtps
481/tcp open dvs
497/tcp open retrospect
500/tcp open isakmp
512/tcp open exec
513/tcp open login
514/tcp open shell
515/tcp open printer
524/tcp open ncp
541/tcp open uucp-rlogin
543/tcp open klogin
544/tcp open kshell
545/tcp open ekshell
548/tcp open afp
554/tcp open rtsp
555/tcp open dsf
563/tcp open snews
587/tcp open submission
593/tcp open http-rpc-epmap
616/tcp open sco-sysmgr
617/tcp open sco-dtmgr
625/tcp open apple-xsrvr-admin
631/tcp open ipp
636/tcp open ldapssl
646/tcp open ldp
648/tcp open rrp
666/tcp open doom
667/tcp open disclose
668/tcp open mecomm
683/tcp open corba-iiop
687/tcp open asipregistry
691/tcp open resvc
700/tcp open epp
705/tcp open agentx
711/tcp open cisco-tdp
714/tcp open iris-xpcs
720/tcp open unknown
722/tcp open unknown
726/tcp open unknown
749/tcp open kerberos-adm
765/tcp open webster
777/tcp open multiling-http
783/tcp open spamassassin
787/tcp open qsc
800/tcp open mdbs_daemon
801/tcp open device
808/tcp open ccproxy-http
843/tcp open unknown
873/tcp open rsync
880/tcp open unknown
888/tcp open accessbuilder
898/tcp open sun-manageconsole
900/tcp open omginitialrefs
901/tcp open samba-swat
902/tcp open iss-realsecure
903/tcp open iss-console-mgr
911/tcp open xact-backup
912/tcp open apex-mesh
981/tcp open unknown
987/tcp open unknown
990/tcp open ftps
992/tcp open telnets
993/tcp open imaps
995/tcp open pop3s
999/tcp open garcon
1000/tcp open cadlock
1001/tcp open unknown
1002/tcp open windows-icfw
1007/tcp open unknown
1009/tcp open unknown
1010/tcp open surf
1011/tcp open unknown
1021/tcp open exp1
1022/tcp open exp2
1023/tcp open netvenuechat
1024/tcp open kdm
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1027/tcp open IIS
1028/tcp open unknown
1029/tcp open ms-lsa
1030/tcp open iad1
1031/tcp open iad2
1032/tcp open iad3
1033/tcp open netinfo
1034/tcp open zincite-a
1035/tcp open multidropper
1036/tcp open nsstp
1037/tcp open ams
1038/tcp open mtqp
1039/tcp open sbl
1040/tcp open netsaint
1041/tcp open danf-ak2
1042/tcp open afrog
1043/tcp open boinc
1044/tcp open dcutility
1045/tcp open fpitp
1046/tcp open wfremotertm
1047/tcp open neod1
1048/tcp open neod2
1049/tcp open td-postman
1050/tcp open java-or-OTGfileshare
1051/tcp open optima-vnet
1052/tcp open ddt
1053/tcp open remote-as
1054/tcp open brvread
1055/tcp open ansyslmd
1056/tcp open vfo
1057/tcp open startron
1058/tcp open nim
1059/tcp open nimreg
1060/tcp open polestar
1061/tcp open kiosk
1062/tcp open veracity
1063/tcp open kyoceranetdev
1064/tcp open jstel
1065/tcp open syscomlan
1066/tcp open fpo-fns
1067/tcp open instl_boots
1068/tcp open instl_bootc
1069/tcp open cognex-insight
1070/tcp open gmrupdateserv
1071/tcp open bsquare-voip
1072/tcp open cardax
1073/tcp open bridgecontrol
1074/tcp open warmspotMgmt
1075/tcp open rdrmshc
1076/tcp open sns_credit
1077/tcp open imgames
1078/tcp open avocent-proxy
1079/tcp open asprovatalk
1080/tcp open socks
1081/tcp open pvuniwien
1082/tcp open amt-esd-prot
1083/tcp open ansoft-lm-1
1084/tcp open ansoft-lm-2
1085/tcp open webobjects
1086/tcp open cplscrambler-lg
1087/tcp open cplscrambler-in
1088/tcp open cplscrambler-al
1089/tcp open ff-annunc
1090/tcp open ff-fms
1091/tcp open ff-sm
1092/tcp open obrpd
1093/tcp open proofd
1094/tcp open rootd
1095/tcp open nicelink
1096/tcp open cnrprotocol
1097/tcp open sunclustermgr
1098/tcp open rmiactivation
1099/tcp o
Dream On Alice, This Ain't Wonderland