Security by obscurity vs standard port

[dennisgorelik]

When configuring production servers, is it better to use standard ports or non-standard ports ("security by obscurity")?

For SSH, should we use standard port 22 or some unknown port, such as 8756?
For SQL Server, should we use standard port 1433 or non-standard port (e.g. 3433)?

We setup firewalls on our servers.
These firewalls allow access to our

Comments

[esl]

Using a standard port (22) is less work for you. In the near term. So I'd choose that. Unless it was my company.

[dennisgorelik]

1) Currently we use port 22.

2) What would you do if it was your company?