3761
Summary
- // if you see it open
- GSAKMP supports group policy distribution, authentication and access control, key generation and distribution, compromise recovery, and group destruction. The sources do not establish the security of any particular implementation or deployment.
About port 3761/tcp.
TCP port 3761 is assigned to gsakmp, the port named for the Group Secure Association Key Management Protocol (GSAKMP). Whether a particular host runs it, or whether it belongs on the public internet, is unknown from the available evidence.
RFC 4535 describes GSAKMP as a framework for creating and managing cryptographic groups. It covers group policy distribution, participant authentication and access control, key generation and distribution, rekeying after compromise, and group destruction. These are protocol capabilities, not evidence of deployment on any host using this port.
The protocol's security purpose does not establish that an implementation or its configuration is safe. The supplied sources provide no observed traffic, deployment, prevalence measurement, or malware association. Treat port-number identification as a clue to investigate; determine the service and intended audience from the host's configuration and traffic before setting an access policy.
- Assignment
- IANA registers TCP port 3761 as
gsakmp, described as “gsakmp port.” [Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv - Protocol
- RFC 4535 specifies GSAKMP for creating and managing cryptographic groups. [Confirmed] — https://www.rfc-editor.org/rfc/rfc4535.txt
- Exposure
- Unknown; the sources do not establish deployment or intended network audience, so no exposure category is supported. [Unknown] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
- IANA service name
gsakmp[Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
Protocol reference
RFC 4535
Primary use
Group policy and cryptographic key management for secure groups
- Observed deployment
- Unknown from supplied evidence [Unknown] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
About port 3761/udp.
IANA assigns UDP port 3761 to gsakmp, and RFC 4535 defines GSAKMP as the Group Secure Association Key Management Protocol. The standard describes a framework for creating and managing cryptographic groups, including group policy distribution, access control, and key generation and distribution. The assignment does not establish that a particular host on this port runs GSAKMP or that it should be reachable from the public internet.
RFC 4535 describes exchanges for group establishment, maintenance, rekeying, and departure. This makes traffic on a confirmed GSAKMP deployment security-sensitive: it participates in group membership and key management. The supplied evidence does not establish deployment prevalence, current use, malware association, or a specific intended network audience.
Treat the service identity as unconfirmed until protocol evidence identifies GSAKMP. Since the evidence does not establish the intended audience, a public access recommendation cannot be assigned from these sources alone.
- Exposure
- Unknown — the protocol purpose is described, but the intended network audience is not established by the supplied evidence.
- Security implications
- A confirmed GSAKMP service handles group policy, membership access control, and cryptographic key management; protect it according to the deployment's security policy.
- Identification
- IANA's
gsakmpassignment does not prove a host is running that protocol.
- IANA service
gsakmp[Confirmed] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
Protocol
Group Secure Association Key Management Protocol (GSAKMP)
Primary use
Create and manage cryptographic groups, including policy distribution, access control, and group key management
- Deployment on a particular host
- Unknown [Unknown] — https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv
Service assignments.
| Name | Protocol | Description | Open frequency |
|---|---|---|---|
| gsakmp | TCP | gsakmp port | 0.00% |
| gsakmp | UDP | gsakmp port | 0.00% |
Service assignments from the IANA Service Name and Transport Protocol Port Number Registry, with open-frequency data from nmap-services.