开云体育

Should someone only forward the required ports when they are expecting service/updates or should they leave them forwarded???

Short Answer: Depends

It has to do with what else on the network, how security conscious the user is, what ports, Nonstandard/VS Standard etc etc etc.

That said I have several system that are port forwarded all the time. Make it very easy to make quick changes to system that would require an hour both ways driving.

If you are going to leave it open all the time, I would suggest using non standard port forwarding. For example Ext Port 65501 to Internal Port 41794. Kind of a passive security, but still nice.

I would do a range of ports, 41790-41799 to the processor.

My favorite is still to leave a vpn laptop on site, or have a vpn to a local box through an IT admin, with the computer in their office.

I have multiple jobs with ports forwarded 24/7. The usual 41794/5 for the main AV proc. A variant for the lighting proc. And then usually a range of ports for the ethernet touchpanels/gateways/sources that get re-mapped to 41795 thru the C2ENET-2 card. This way I can get to everything.

Of course this is in the RESI world...

Never had a problem with "security".

Corporate/Edu/Gov is a whole other game of course...