External Database Ports Normally closed in our firewall configurations

Database ports (1433,1434,3306,5432) are nominally closed in our firewall configurations. We have the capability to open these should a need be identified to read directly from the server database. If we do open these ports they will be secured such that will only be opened to specific IP addresses. for securities sake.