Port 593 is MS-RPC over HTTP, TCP.
TCP
medium risk
App-IDmsrpc
Microsoft RPC over HTTP — allows RPC calls to traverse HTTP proxies and firewalls. Used by Exchange Outlook Anywhere and some AD services.
Palo Alto
Create the service object for this port, then allow the App-ID on it. Restricting the rule to the port's service object keeps the rule working on a non-default port and stops the App-ID matching on other ports. Replace the placeholders with your own rule name and zones.
set service tcp-593 protocol tcp port 593
set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application msrpc service tcp-593 action allow
Risk and exposure
Rated medium risk. Restrict this port to the sources that need it and keep the service patched; avoid exposing it to the whole internet unless the service is meant to be public.
Check it
- Linux
ss -tlnp | grep :593 - PowerShell
Test-NetConnection <host> -Port 593 - nmap
nmap -p 593 <host>