whatportis.com
suggest an edit →

Port 1293IPSec

Internet Protocol Security (IPSec) is a suite of protocols designed to secure IP communications by authenticating and encrypting each IP packet in a communication session. It is widely used to establish secure VPNs, protecting data traffic over untrusted networks, including the internet. Port 1293 is specifically assigned for the IPSec Network Address Translation-Traversal (NAT-T), facilitating IPSec operation behind NAT devices..

inSecurityRemote AccessNetwork ServicesCloud
transport
tcp · udp

2 transports registered

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
5/10

caution

lookups
17,822

rank 155 of 993 · top 16%

Technical Details

what runs on :1293

IPSec operates at the network layer, providing security features directly to IP packets through two main protocols: Authentication Header (AH), which ensures data integrity and origin authentication, and Encapsulating Security Payload (ESP), which offers encryption alongside authentication. It supports both transport mode, encrypting the payload of IP packets, and tunnel mode, encrypting the entire IP packet for VPN scenarios.

Port 1293 is allocated for IPSec's NAT Traversal method, which encapsulates IPSec packets within UDP to bypass NAT device limitations. When traditional IPSec cannot traverse NAT due to issues with preserving packet integrity or IP headers, NAT-T encapsulates ESP packets over UDP, usually via port 4500. However, the original specification also defined port 1293 for this purpose, mainly seen in older or specialized implementations.

IPSec can utilize several cryptographic algorithms, including AES, Triple DES, SHA, and Diffie-Hellman, negotiable through protocols like IKE (Internet Key Exchange). This negotiation process ensures mutual authentication and agreement on security parameters before data transmission begins.

Security Information

exposure of :1293

risk score

5/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.8 across 216 ports — this one sits 1.2 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • Misconfigured IPSec policies or weak cryptographic settings can undermine the effectiveness of encryption and authentication.
  • Vulnerabilities in the IKE protocol, such as aggressive mode leaks or Key Exchange weaknesses, can be exploited to perform man-in-the-middle attacks.
  • Compatibility issues with NAT devices might inadvertently lead to plaintext failover or traffic leakage if NAT-T is improperly configured.
  • Possible susceptibility to DoS attacks by overwhelming the negotiation processes or endpoint resources.

Mitigations:

  • Ensure strong cryptographic algorithms and proper key management practices to maintain data confidentiality and integrity.
  • Regularly update VPN gateways and IPSec clients to patch protocol vulnerabilities.
  • Enable logging and monitoring to detect suspicious connection patterns or failed negotiation attempts.
  • Restrict access to IPSec endpoints through firewall rules to minimize exposure.
  • Properly configure NAT-T support and avoid fallback to weaker or unencrypted modes, ensuring traffic remains protected behind NAT devices.

Related Ports

all 216 in security →

the 8 most looked-up other ports in security — 216 ports carry that label.

portservicerisk
:8881Atlasz Secure Servercaution
:443HTTPScaution
:8291Winbox MikroTik Admincaution
:3268Microsoft Global Catalog (GC)caution
:135Microsoft EPMAPcaution
:3128Squid Proxy HTTPcaution
:8080HTTP Alternatecaution
:7000Vuze HTTPS Trackercaution

risk mix of the 8 listed

  • caution100%

3 of 8 encrypted