Port lockdown in self ip

Hi ,

Welcome to the community.

About port lockdown, we have to do the same for securing our device from external or internal network. First of all

If your self ip config is allow default you are allowing ports including 443 and ssh to outside (ext or internal network). If you configure allow default then your management plan will be exposed to internet or internal network. If it's not HA interface allow none is enough.

 If it's ha interface, allow default will be ok, because it's need for communicate between devices.

So you can configure port lockdown once checking if it's ha or traffic interface.

Br

Aswin