[SnAp227]

Your best bet is to redefine these services manually if you're trying to allow them; and only allow the specific services you need.

If you are really dieing to find out and have a spare Edge device, create a rule that explicitly blocks that service (and ports coincidentally) then run nmap on an outside host. Check the "reports" tab to see which ports get stuck in the rule.