Hazelcast ports open on external interface on Enforce.
Last Updated June 05, 2017
Port scanner found ports 5701, 5702, 5703 are open to external interface despite only being needed on localhost
Open hazelcast-config.xml in %DLP_Home%/Protect/config and locate the section starting with "<properties>" Add the following line to the bottom of the properties list: <property name="hazelcast.socket.bind.any">false</property> Save the file and restart VontuManager
Confirm hazelcast now listens on localhost by doing a “netstat –lnpt | egrep “(5701|5702|5703)”(Linux) or "netstat -nao | findstr “5701 5702 5703”(windows). The output should be something like this (on ipv4 systems, ipv6 would show up as tcp6 in “Proto” and :::* in the “Foreign Address” columns):