Port 9090McAfee Web Gateway Proxy
Port 9090 is commonly used as the default proxy port for McAfee Web Gateway, formerly known as Webwasher or Secure Web. It facilitates secure web filtering, malware scanning, content inspection, and access control for corporate networks, acting as an intermediary between users and the external internet to enforce organizational security policies..
- transport
- tcp
- in transit
- encrypted
- assignment
- unofficial
- risk
- 5/10
- lookups
- 24,342
single transport
payload protected on the wire
used by convention
caution
rank 75 of 993 · top 7%
2 other services are registered on port 9090. compare all 3 →
Technical Details
what runs on :9090Port 9090 has been widely adopted as the default management and proxy communication port for web security solutions like McAfee Web Gateway, previously branded as Webwasher and Secure Web. Operating primarily over TCP, this service intercepts HTTP and HTTPS traffic, enabling real-time inspection and modification before forwarding it to the intended destination. Administrators access configuration and reporting interfaces over this port, facilitating centralized management of security policies.
The gateway maintains extensive filtering capabilities such as URL categorization, malware detection, SSL inspection, and data leak prevention. When a user requests a webpage, the proxy analyzes content based on pre-configured rules, blocks malicious or inappropriate material, and logs activity for auditing purposes. SSL interception allows visibility into encrypted traffic, an essential feature for detecting threats embedded in HTTPS streams.
From an operational viewpoint, port 9090 listens for proxy requests on the internal network and may also support management interfaces exposed to privileged users. Its typical deployment in enterprise perimeters enforces unified security controls, reduces the attack surface by masking client IP addresses, and consolidates access management. Integration via APIs further extends its capabilities to third-party security tools.
Security Information
exposure of :9090risk score
5/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
web services averages 3.9 across 112 ports — this one sits 1.1 above.
in transit
encrypted
payloads are protected on the wire
assignment
unofficial
used by convention, not registered — what answers here varies by deployment
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
Common Vulnerabilities:
- Unauthorized access if management interfaces over port 9090 are exposed externally or lack strong authentication controls.
- Exploitation of unpatched gateway software vulnerabilities leading to privilege escalation or proxy bypass.
- Man-in-the-middle (MitM) attacks during SSL inspection if certificate validation is improperly handled.
- Abuse by malware to tunnel command and control (C2) traffic through improperly secured proxies.
Common Mitigations:
- Restrict port 9090 access on firewalls to trusted internal management hosts only.
- Enforce strong, multi-factor authentication for administrative interfaces.
- Ensure regular security updates and vulnerability patches for the gateway software.
- Monitor proxy logs for anomalous usage patterns indicating potential abuse.
- Implement strict SSL certificate validation policies and user awareness regarding certificate warnings.
- Use network segmentation to isolate proxy services from sensitive internal systems.
Related Ports
the 8 most looked-up other ports in web services — 112 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8888 | Sun Answerbook & Alt HTTP | TCP | Web Services | caution | 123.9k |
| :8000 | Intel Remote Desktop / Alternate HTTP Port | TCP | Web Services | safe | 84.3k |
| :8888 | NewsEDGE | TCPUDP | Web Services | caution | 83.3k |
| :8888 | HTTP Alternative Port | TCP | Web Services | caution | 76.5k |
| :8888 | GNUmp3d Streaming HTTP | TCP | Web Services | caution | 76.3k |
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :80 | HTTP | TCPUDP | Web Services | caution | 67.3k |
risk mix of the 8 listed
- safe13%
- caution88%
0 of 8 encrypted