SECURE PORT FORWARDING

A network edge device configured to perform a method for controlling access to services in a network, the network including at least one device configured to provide a service, the service being associated with a port is provided. The method involves performing a port identification scan on the network to generate port data representing the service and the port; obtaining port vulnerability data; generating a port vulnerability score for the port based on the port data and the port vulnerability data; obtaining a threshold port vulnerability score; and controlling access to the port in dependence on a comparison of the port vulnerability score with the threshold port vulnerability score.