Skip to content
IT Atlas

Port

Port 88

Conventionally used by Kerberos. Port assignments are conventions, so confirm the actual listener before you write a rule around this number.

TCP · UDPEncrypted: Yes

Protocols on this port

Kerberos

Ticket based authentication

Security: Clock skew breaks it; watch for Kerberoasting and ticket forging

TCP / UDP · Encrypted: Yes

Where this port appears in the documentation

Active Directory

Microsoft's on premises directory service, providing authentication, authorisation, policy and object management for Windows environments.

Kerberos

A ticket based authentication protocol that proves identity to services without sending the password across the network.

Exposure guidance

Decide reachability from the identity of the caller, not from the port number. If the service on this port carries credentials or administrative control, restrict it to an administrative network, require strong authentication, and log every session that reaches it.

Nearby ports

Port 80Port 110

In the knowledge graph

Open the interactive map centred on this entity to see everything it connects to and travel outwards from there.

Explore port 88 in the knowledge graph