The Cyc server provides API services by binding two TCP ports and accepting TCP connections at those ports. The default installation installs API servers accepting at ports 3601 (ASCII) and 3614 (CFASL). The actual port numbers used can be specified at installation time.
TCP Port Security
The Cyc server does not provide secure tcp connections. Consequently it should be installed behind a network firewall or local firewall. Applications using Cyc should reside within the firewalled network or on the same host as Cyc. Remote access to Cyc should be performed using secure shell (SSH) to forward the ports Cyc uses, over an encrypted channel. Cyc's built in HTTP server defaults to port 8088 which can be proxied as a secure (HTTPS) internet service.