Security Objects

Security lists specify the type of traffic allowed on a particular type of subnet.

Rules set on the security lists can be either stateful or stateless. Stateful rules employ connection tracking and have the benefit of not requiring exit rules. However, there is a limit to the number of connections allowed over stateful connections and there is a performance hit. Oracle, therefore, recommends stateless lists for media interfaces.

The security list for management ports can be stateful.

Port Numbers for Importing Traffic

Allow inbound traffic for the following ports.

Port no	Service	Protocol
22	SSH	TCP
111	rpcbind	TCP and UDP
80	Nginx	TCP
443	Nginx	TCP
4739-4742	apid	TCP
161	snmp	TCP and UDP

For more information, see the Oracle Communications Session Monitor Security Guide.