Port 8080 is open on a Windows JSS, can it be disabled?

[alexjdale]

I just learned (thanks to our security team) that the JSS can be accessed over port 8080 on Windows. This is not allowed in our environment (plain-text auth), so I need to disable that. Will that cause any issues? Has anyone done it?

[rfadul]

refer to: Linux JSS, Change port from 8443 to 443

[alexjdale]

Yeah, that's not providing me the information I need, but thanks for the link.

[mm2270]

Not sure why port 8080 would be open or needed on a Windows JSS. According to https://support.apple.com/en-us/HT202944 this is used as an alternate Apache web service port. I don't think the JSS would need that available, but I don't know for sure. I would maybe check in with your JAMF TAM on that to get their input.

[alexjdale]

Yep, I e-mailed him to ask, I see that it is on JAMF's official list of network ports for Windows but I can't for the life of me understand why it is open by default.

I never even knew it was open, you'd have to specify the port to even get to the login page and we don't use it so there is really no risk, but it's on someone's list now and I have to remediate it.