Port 1194 (OpenVPN)
Default OpenVPN port (also commonly run on TCP 443).
- Transport
- UDP
- Internet exposure
- Public by design
Normally public, but keep the software patched and hardened.
Security notes
- Keep the server patched and use certificate authentication.
- Unexpected outbound OpenVPN can be a user bypassing controls.
When it shows up in your logs
Outbound OpenVPN from corporate hosts may be an unapproved VPN.