## About Restricting Services

If your site has a security requirement, you can block certain services on the system to control the degree of access from your site LAN. The following table shows which services can be blocked. The ports for SMTP (port 25), DNS (port 53), and DHCP (port 67) are always open for outgoing messages.

Service | Allows access to: | Port | Direction
--- | --- | --- | ---
Storage Management HTTP | Non-secure web or CLI | 9080 | Incoming
Storage Management HTTPS | Secure web or CLI | 6789 | Incoming
Service HTTP | Non-secure web or CLI | 7654 | Incoming
Service HTTPS | Secure web or CLI | 443 | Incoming
SNMP | Third-party tools | 161 | Incoming Outgoing
CIM HTTP | Third-party tools | 5998 | Incoming
SSH | Secure shell | 22 | Incoming
Revision Maintenance | Firmware/software updates | 443 | Outgoing

### Related Topics

- Managing From the Site LAN
- About Network Configuration Options