4510L port scan

[SR45]

Lynn53...

If you are using IE9, your message will not get posted.  You will have to click on the Compatability Mode to the right of the address bar in IE9, than post

Good luck

[IMG]http://i.imgur.com/ySWOa.jpg[/IMG]

[Lynn53]

They should put that somewhere, wondered what was wrong. I started out with a SCH-LC11 Hotspot and would go to grc.com, then ShieldsUp and do a common ports and all service ports scan. They would come back with all ports stealth and a pass grade. I had problems with the SCH-LC11 dropping the network connection because I am in a area between 3G and 4G and it was trying to go back and forth. I traded it in and got a 4510L since it has the ability to lock in to receive 3G only. Weak 4G in area. When I do the scans with the 4510L it comes back with most of the ports closed instead of stealth, this is not bad but not as good as stealth. Why is this happening? Is it something I should worry about? I also have a WiFiRanger Router I got from the 3Gstore.com that picks up the hotspot wifi and allows you to run ethernet cable to your computers. I think the scan will not see the router since the hotspot is first in line but will the router make me stealth even though it does not show it. The router has NAT and SPI. Am I wrong about this? Please ask me questions if I have not explained this enough. Just want to know if I should do something since the 4510L is not getting as good of results. Thanks Lynn

[Lynn53]

Sorry I did it again forgot to click that capatability thing. If no on knows the answer can you tell me where to post. Verizon phone support was of no help. They looked up novatel and it said Verizon was to give support but as I said they could not help. Please let me know if there is a place to find an answer or am I just in to big of hurry here.

[Lynn53]

Forgot to say I took the WiFi Ranger and connected it to comcast able and the computer and the scan came out mostly closed with a few open ports, so it does not appear to help as much as I like with protection. Anybody know of a better wifi router.

[ArnettH_VZW]

Hello Lynn53,

I'm a little unsure as to what you are asking. Just to recap, your now have the Verizon Wireless Mifi 4510L mobile hotspot. Are you trying to connect a router to the mifi so you can use it with a pc? It would help if we knew what is it that you ultimately want to do with the mifi. Thank you...

[Lynn53]

What I am trying to bring up is the security difference between stealth and closed ports. Yes I now have the 4510L and when I do the scan at grc.com it comes out closed. First thing is do you know what I am talking about on the scans. Phone support had no idea. So first if you do do not know then look at the site. I am trying to learn if the difference is that big of deal when it comes to security. I hate to say this but like phone support said they mainly get people connected, they know little else. So if no one knows no more than how to get me connected let this thread end. If you would like to go beyound that then tell me what makes the 4510L scan different than the SCH-LC11. Is having mostly closed ports instead of stealth that big of deal. I bring up the part of the router to say would this help the security of the 4510L or is it needed. Also I do use the router already for that pupose on my cable system and am going to use a router with a hardware firewall to help the security of the hotspot. But I wanted opinions on how much this is needed with the hotspot. I am not having any problem with connection of the 4510L, just to be clear on that. At least you did give me a reply so thank you for that. But now does anyone know about the security issue of having stealth ports or having closed ports?

[Lynn53]

Forgot about what I am going to use the  hotspot for. I am going to retire to an area that the best way to get internet is to use the hotspot. I will be 12 miles outside a city so there is no cable. I go to my house there now as much as possible and when I do I use my hotspot with my laptop for general internet use. So I am just trying to learn more about the setup I will be using and how to stay secure being on the internet. I have 4 years before I retire, that may not be enough time to learn all I need, ha ha.

[VL600_Boston · Accepted solution]

This info may help your knowledge base before you retire.     http://en.wikipedia.org/wiki/Port_scan

Closed ports are pretty safe -  they do provide some data to scanners that a port exists and is denied-  but these kinds of attacks are not as useful as they were (better security software).   So, I would not worry about them.   Stealth ports are those that simply did not reply to an outside request like from grc.   More important to to make sure your windows firewall is running properly and your security software (3rd party typically) is up to date (Note: your security software must come from a trusted source).   Most attacks these days are of the "trojan horse" variety -  they don't attack the low-level ports directly -  they send you an email and entice you to click an attachment which runs a  program that opens your systems up (some of this malware is quite tenacious in that it disables internal security software and accessing security sites and windows update, etc.  quite malicious).    So,  #1,  never click an attachment before scanning it with security software even if it's from someone you know.   Do not click links unless you are pretty sure they are good (some links look OK but are spoofs).   Beware of phishing.  

[Lynn53]

Thanks VL600_Boston that is the type reply I was looking for. Sounds like I have nothing to worry about in the 4510L coming back with closed ports. Yes I do have windows firewall running and use Avast Pro Antivirus, I also keep windows up to date and things like java and flash player. So if I do put a router between the hotspot and the computer I should have the bases covered by your reply. I am still curious why the difference in the SCH-LC11 and the 4510L scans, guess it is like everthing else and just the way the company making the product wanted to go. I was hoping someone from Verizon with comment on that part of the subject. Again thanks for your reply. Lynn53

[VL600_Boston]

You are welcome.    Hopefully,  some other router users will be able to tell you how to change settings in your new device to match your older one.   Enjoy.

[Lynn53]

Hopefully I am on the right road with the router. I also have a Cradlepoint MBR900 that I used with my old Verizon USB760 air card. It does not pick up WiFi but I have ordered a Pepwave Surf mini from the 3Gstore.com that when attached to the MBR900 will pickup WiFi and then I can run ethernet cable to my computers. A scan with the grc.com site using comcast cable and going through the MBR900 gives all stealth. The WiFiRanger works well but does not give all stealth like the MBR900. I know a lot of this is overkill but its ok because my definition of a hobby is something you can spend all the time and money you want even if it gets you no where. The 3Gstore.com does have a lot of good stuff for usb modems and hotspots if you need anything. Lynn53

[Lynn53]

If any body else wants to know about any of this look what just happened. I live in the Houston area in one of the cities outside of Houston. I have the 4510L set to CDMA so I only get 3G since that is all there is in this area. I went to another city about 10 miles over and set it to global to try out the 4G. Did great got over 12 meg download and over 7 meg upload. Then ran those scans and got stealth results, where before got closed on 3G. So it makes a difference if the device is on 3G or 4G as to how the scan will come out. I guess I will give up finding out why as no one from Verizon has tried to answer that part. Lynn

[VL600_Boston]

Based on your last couple of posts,  I now see you do indeed have a "hobby" -  setting up routers and networks.   You may want to take those Microsoft certification courses and become an "certifiied"  expert.       Ok, back to semi-serious -  Verizon does use firewall technology in their network to get rid of nasty traffic.   In 4G, there are ways that the network can adjust the settings in your MiFi router.  That is likely why you saw different results in the 4G area.  

[Lynn53]

Thanks for the information. Maybe when I retire I would have time for Certification but right now work gets in my way of my hobbies, don't you just hate the way work does that. Would have thought someone from Verizon would have gave a lot of information on this subject but guess not. Thanks Lynn

[VL600_Boston]

Nope -  The VZW people are not in the "education" biz.  They may refer you to a FAQ or info web page but that's it.   Otherwise, they  follow a rigid  "troubleshooting tree"  to solve technical issues.  These "trees"  or flowcharts  can be useful aids but they rarely teach anything,  and worse,  they are generally  "too thin"  to handle many situations that customer's are dealing with.   I have rarely solved a serious issue using a flowchart.  These problems are a combination of things that together are creating the issue.   If the problem is simple,  then the flowcharts usually work.   There is no flowchart for 4G outage.    I noticed that there are some useful things in the  comments section of the "shop for device" area.  Here's an example,

-----------------

Comment on MiFi™ 4510L   From the product area
Reviewed by tempReview, Costa Mesa, CA on April 25, 2011

It has been just about a week since I flipped over from the USB modem UM175 to the MiFi4510. Plan on surfing into your device to get the settings the way you want them, but once they are set it is a dependable device.Advanced-Power-Shutdown needed to be bumped to "Never" for me as I need always on connectivity. It would drop my VPN when no data was flowing otherwise.Secondly I set WWAN-Preferred Mode to "LTE Only" to keep it from hunting for better towers and causing dropped VPN sessions.Really happy with the flexibility, just need to find a USB cable that only charges and it would be perfect for me.

------------------

Take care.