Port 443 is HTTPS, TCP.
TCP
low risk
App-IDsslweb-browsing
HTTP over TLS — encrypted web traffic. Default for nearly all modern web services including Teams, Zoom, M365, vCenter, and GlobalProtect portals.
Palo Alto
Create the service object for this port, then allow the App-ID on it. Restricting the rule to the port's service object keeps the rule working on a non-default port and stops the App-ID matching on other ports. Replace the placeholders with your own rule name and zones.
set service tcp-443 protocol tcp port 443
set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application ssl service tcp-443 action allow
set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application web-browsing service tcp-443 action allow
Risk and exposure
Rated low risk. Even so, only expose this port to the networks and hosts that need it, and keep it patched.
Check it
- Linux
ss -tlnp | grep :443 - PowerShell
Test-NetConnection <host> -Port 443 - nmap
nmap -p 443 <host>