Maybe a noob question. I have a 2860 and set up SSL VPN, which works fine. Doing a port scan shows 443 as permanently open with all other ports stealthed. Is there a reason for why it is permanently open as this seems to be a serious security issue. I did change it to a non-standard port, but that is still open on the router. Maybe I don't understand how this is supposed to work

If you enabled SSL VPN, the port is open all of the time - it doesn't know when you want to connect.

However, if you changed the port, and Port 443 is still open, remember that the router's web interface also uses SSL for its HTTPS access. Turn off remote access if you don't want that.

Open ports are not necessarily a bad thing... you can't have remote services without an open port!