Port 7474 is Neo4j, TCP.
TCP
medium risk
App-IDweb-browsing
Neo4j graph database HTTP interface, used by Neo4j Browser and the HTTP API. HTTPS defaults to 7473 and the Bolt protocol to 7687.
Palo Alto
Create the service object for this port, then allow the App-ID on it. Restricting the rule to the port's service object keeps the rule working on a non-default port and stops the App-ID matching on other ports. Replace the placeholders with your own rule name and zones.
set service tcp-7474 protocol tcp port 7474
set rulebase security rules <rule-name> from <from-zone> to <to-zone> source any destination any application web-browsing service tcp-7474 action allow
Risk and exposure
Rated medium risk. Restrict this port to the sources that need it and keep the service patched; avoid exposing it to the whole internet unless the service is meant to be public.
Check it
- Linux
ss -tlnp | grep :7474 - PowerShell
Test-NetConnection <host> -Port 7474 - nmap
nmap -p 7474 <host>