Hi Stephen,

Are you saw its SMAX that opened up these ports? Just none of them seem close to any of the ports that are either used externally as part of the Cluster services or if you look internally within the Kubernetes cluster. I've even had a look on my own SMAX cluster and cant see any of the 3 ports you mentioned being open and active on either my Control Plane or Worker Nodes. I've checked the Kubernetes dashboard for the cluster and those ports aren't in use for any of the internal services.

I ran the following to check the services that are exposed for SMAX, CMS and OO:

kubectl get svc --all-namespaces -o go-template='{{range .items}}{{range.spec.ports}}{{if .nodePort}}{{.nodePort}}{{"\n"}}{{end}}{{end}}{{end}}'
3443
3000
5000
5443
5444
443
9443

When you check online Port 2000 seems to relate to Cisco Skinny Client Control Protocol (SCCP)

Port 5060 Session Initiation Protocol

Port 8008