AWS workspaces: WorkSpaces: add kpasswd port 464, fix TTCP typo
Summary
Adds TCP/UDP 464 (kpasswd) to the listed directory ports that must be open, and corrects the typo 'TTCP 3268-3269 - Global Catalog' to 'TCP 3268-3269 - Global Catalog'.
Security assessment
The diff documents an additional firewall port requirement (TCP/UDP 464 for Kerberos password changes) and fixes a malformed protocol name so the Global Catalog rule is accurate; this is network configuration guidance/hardening with direct firewall-rule impact, though it is not tied to any specific vulnerability or CVE.
Evidence
+ * TCP/UDP 464 - kpasswd
Diff
diff --git a/workspaces/latest/adminguide/workspaces-port-requirements.md b/workspaces/latest/adminguide/workspaces-port-requirements.md index 02e4547..5f12f5c 100644 --- a//workspaces/latest/adminguide/workspaces-port-requirements.md +++ b//workspaces/latest/adminguide/workspaces-port-requirements.md @@ -962,0 +963,2 @@ No matter which type of directory you have, the following ports must be open on + * TCP/UDP 464 - kpasswd + @@ -967 +969 @@ No matter which type of directory you have, the following ports must be open on - * TTCP 3268-3269 - Global Catalog + * TCP 3268-3269 - Global Catalog