Mentor

 • 

14 Messages

Saturday, August 19th, 2017 7:06 PM

Port 443 Open In Cisco_AP_ATT

I found and old thread here about my problem concerning Port 443 being open, but for some reason I couldn't reply to it, so I decided start this one.  I also have Port 443 open when running a GRC Shields Up test. I've tried removing ConnectToCiscoAP from the hosted applications section. I've also checked Maximum Protection in Cisco_AP_ATT. When I check the next day, Port 443 is open again, and Allow Individual Applications is checked again.

The main STB (DVR) is wired, and I have one wireless STB in the bedroom. Is the wireless STB causing Port 443 to show open in the Shields Up test, and causing Allow Individual Applications to be re-checked in Cisco_AP_ATT?  If I can get ATT to change my bedroom STB back to a wired one, will that help, or is there something else I can do? I don't like that security hole with a port being open.

   

Expert

 • 

3.6K Messages

8 years ago

As an experiment get yourself a ethernet cable and wire it yourself.  The wireless box (through it's network port) can be wired directly to the gateway.  Unplug the WAP.  You may have to reboot the gateway.

 

As a side question I have.  If you do manage to close port 443 then how would your internet access ever work to access https sites?

Mentor

 • 

14 Messages

8 years ago

To answer your question, I have no idea. Maybe I should leave things as they are. 

Mentor

 • 

12 Messages

7 years ago

I have the same situation, at&t keeps opening port 443 (Cisco_AP_ATT ). If I close it I notice NO change in internet behavior, but within 24 hours it's open again. If it is necessary for https, (1) why do I not see a noticeable change in internet activity (2) with it being open, is there a possibility of being attacked via port 443? My main u-Verse TV has an Ethernet cable. I do have 1 wireless PC connection and 1 wireless TV box. As I am not the brightest bulb in the IT marque please forgive my lack of knowledge.  

Mentor

 • 

14 Messages

7 years ago

I tried to change the wireless receiver to wired, but I couldn't get it to work. Since I really don't need a wireless receiver, I guess I could ask att to exchange the wireless for a wired receiver. Whether they will do it or not, is the question.

Expert

 • 

3.6K Messages

7 years ago

I tried to change the wireless receiver to wired, but I couldn't get it to work.

Should work if you do it correctly.

 

  1. Pull power cord from the gateway.
  2. Disconnect the WAP (remove ether net cable from back of gateway).
  3. Ethernet connect from one of the yellow gateway ports to the network port on the wireless receiver.
  4. Put the power plug back into the gateway (but do it at least 15 secs. after you pulled it's power) and let it fully reboot.
  5. Plug power back into the wireless (now wired) receiver.

Full disclosure.  I actually never tried this but this is how I would expect it should be done.  The general idea is to boot the gateway with the proper set of attached devices (dvr, wireless-now-wired receiver) so that the gateway registers only those devices.  The WAP is no longer in the picture.  And for simplicity of this explanation I am ignoring any other internet connections to the gateway, possibly a computer, for example.

 

Update:

It seems almost every time I in the process of composing a reply my thoughts beats me to it.  Sorry if this is redundant.

Mentor

 • 

14 Messages

7 years ago

Thanks. I'll give it a try. It seems I left out a step when I tried it before.

Mentor

 • 

12 Messages

7 years ago

I can watch TV just fine with the port closed. So your assumption is incorrect.

 

Mentor

 • 

14 Messages

7 years ago

I also can watch tv with the wireless receiver, with port 443 closed. No idea why it has to be open.

Mentor

 • 

12 Messages

7 years ago

Employeemy thoughts just does not know about the real world.Cat LOL

For what's it's worth, I closed port 443 on Wednesday and so far (at least for the moment) it has NOT been automatically re-opened.   Smiley Happy       

AND my TV viewing and internet has been JUST FINE!                    

at&t and it's employees are not as good now as when they were back when I worked for them.

Mentor

 • 

14 Messages

7 years ago

I close Port 443 and it stays closed for an unknown amount of time. While closed I have no problems watching TV or with internet.  443 does open again, but I haven't kept track of how long it stays closed. 

 

P.S. I haven't tried again changing receiver from wireless to wired. Haven't had the time.

Community Support

 • 

3K Messages

7 years ago

Hi,

 

Port 443 is used by the Wireless receiver. It is not for viewing experience, but it used as the port for testing. Even if you wire the receiver, port 443 will still be active, as the testing tools will run intermittently causing the port to reopen. If you use the port for another device, the router will not overwrite the rule, but testing will no longer work. If you remove the WAP and wireless receiver off your network, you will no longer run into this issue. I hope this answers everyone's questions.

 

David, AT&T Community Specialist

Mentor

 • 

14 Messages

7 years ago

@ATTHelpForums  Thanks for that info. Good to know.  I guess I'm a little paranoid when it comes to open ports. I try my best to be very security conscious.

Mentor

 • 

12 Messages

7 years ago

11/22/17 UPDATE....port 443 has remained closed since 11/15/17 (when I deleted the "Cisco_AP_ATT" in NAT/Gaming)  and my TV and internet has been just fine.

Mentor

 • 

12 Messages

7 years ago

12/17/17 Update.....port 443 is still closed...AT&T has NOT reopened it. 

Mentor

 • 

14 Messages

7 years ago

@RetiredATandT..................I don't know how your port 443 is staying closed. I set Cisco_AP_ATT to Maximum Protection. I then check Shields Up which shows port 443 Stealth. The next day it is open again. I wish I know your secret. Smiley SurprisedSmiley Very Happy


NEED HELP?