| Local IWSVA Ports | Service | Notes | 
| 21 | Proxied FTP requests | user configurable | 
| 22 | SSH remote access | |
| 161 | SNMP agent | if multiple SNMP agents are installed, then additional ports are used | 
| 1025-65535 | FTP active data connection | from server to proxy, active FTP is not enabled by default | 
| 1344 | ICAP mode only | default | 
| 1444 | IWSVA to IWSVA connection | user configurable | 
| 1817 | PAC file | |
| 5432 | PostgreSQL | default; policy database | 
| 6011 | Log Server Port | used by log uploading | 
| 8080 | HTTP proxy mode only | user configurable | 
| 8081 | Default guest user port | |
| 8443 | IWSVA console; SSL mode | can be modified | 
| 8983 | solr port | |
| 10190-10319 | TMCM agent | any one port within this range (determined by TMCM) | 
| 9002 | summary handler port | |
| 9003 | stats handler port | |
| 9004 | dashboard handler port | |
| 9090 | LDAP authentication in transparent mode | user configurable | 
| 9091 | HTTP scanning | redirect port for scanning before delivery | 
| 3128 | squid | default | 
| Remote Ports IWSVA May Connect To | Service | Notes | 
| 21 | proxied FTP requests | user configurable | 
| 25 | Email notifications | user configurable | 
| 80 | proxied HTTP requests | default | 
| 443 | proxied HTTPS requests | |
| 563 | proxied HTTPS requests | |
| 2048 | WCCP communication | default | 
| 1025-65535 | HTTP response | as per URL specification (www.servername:PORT) | 
| 1025-65535 | FTP passive data connection | from proxy to server | 
| 1025-65536 | FTP active data connection | from proxy to client |