Port Reference

+ Palo Alto App-IDs

Search by port number or service name. App-IDs shown for policy building.

Port 443 · HTTPS

Port 443 is HTTPS, TCP.

TCP
low risk
App-IDsslweb-browsing

HTTP over TLS — encrypted web traffic. Default for nearly all modern web services including Teams, Zoom, M365, vCenter, and GlobalProtect portals.

Palo Alto

Create the service object for this port, then allow the App-ID on it. Restricting the rule to the port's service object keeps the rule working on a non-default port and stops the App-ID matching on other ports. Replace the placeholders with your own rule name and zones.

set service tcp-443 protocol tcp port 443
set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application ssl service tcp-443 action allow
set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application web-browsing service tcp-443 action allow

Risk and exposure

Rated low risk. Even so, only expose this port to the networks and hosts that need it, and keep it patched.

Check it

  • Linux ss -tlnp | grep :443
  • PowerShell Test-NetConnection <host> -Port 443
  • nmap nmap -p 443 <host>

Related ports

← Search all ports