Airwall Gateway is reporting filtered ports from a network scan (v2.1.0 and earlier)
In Airwall Gateways v2.1.0 and earlier REJECT packets on the underlay for services they are not listening on. This commonly shows up as a filtered port from network scanners.
In v2.1.0 and later, Airwall Gateways do not respond to (or drops) ports they do not actively use on the underlay.
There are no other listening services on the Airwall Gateway underlay.
On this version, the only listening service an Airwall Gateway has is the HIP process running on User Datagram Protocol (UDP) 10500 by default.