| Port | Protocol | Usage |
| 22 | TCP/UDP | SSH (device management; optional: tcpdump capabilities) |
| 25 | TCP/UDP | SMTP (optional alerting method) |
| 49 | TCP/UDP | TACACS (optional) |
| 80 | TCP | HTTP (optional: not recommended for use – should be closed/blocked) |
| 88 | TCP/UDP | Kerberos KDC (optional) |
| 161 | TCP/UDP | SNMP (optional) |
| 443 | TCP | HTTPS |
| 514 | TCP/UDP | RSYSLOG (optional) |
| 749 | TCP/UDP | Kerberos Admin Server (optional) |
| 1812 | TCP/UDP | RADIUS (optional) |
| 2812 | TCP | Monit (optional: can be TLS encrypted) |
| 6367 | TCP | LiveAction WP Omni protocol |
| 6370 | TCP | Capture Engine Manager |
| 8443 | TCP | HTTPS |