Close VNC Port on EX Controller

[bluewhite4]

Network scans are showing port 5091, commonly used for VNC, open on all three EX controllers that we have. I'm able to successfully connect on that port number, via telnet, to the management IP of the controllers.

Anyone have any idea on how to shut that down/close the port? I don't see any documentation that it should be open or is used by anything.

[sarond]

Pretty sure that's console access.

Check out
https://www.mitel.com/document-center/business-phone-systems/mivoice-business/mivoice-business/all-releases/en/ex-controller-installation-and-administration-guide

[bluewhite4]

Reading through the document, thanks by the way I hadn't been able to find that one.

When you say console, are you referring to how the EX uses VNC in appendix A for the Static IP Address setup?

[sarond]

I've never installed an EX before so not 100% sure.

I believe it is used in a way similar to the RS232 port would be on physical 3300 controllers, so debugging and console access (CLI). It seems likes it directly connects you to the shell.

[sunspark]

Try to use the web gui

[bluewhite4]

Level 2 support found the answer.

In the EX Controller webpage go to VM-tab and change the Vnc ID for the MIVB from 1 to -1. Reboot afterwards.

This disables the port and makes my auditors happy.

[sunspark]

Level 2 support found the answer.

In the EX Controller webpage go to VM-tab and change the Vnc ID for the MIVB from 1 to -1. Reboot afterwards.

This disables the port and makes my auditors happy.

KMS : Document ID HO3987