00197712-01_IM_SUPPORT_MEDIA_2.0_EN.pdf - 第32页

Support Media 2.0 12/2014 Edition 32 Rules Name Of The Rule Path Service Name Direction Protocol(s) Ports Purpose Built-in rule File and Printer Sharing (Echo Request - ICMPv6- In) N/A N/A N/A N/A N/A Built-in rule for F…

100%1 / 44
Support Media 2.0 12/2014 Edition
31
5 Appendix
5.1 Firewall Rules
This chapter contains the firewall rules configured by the SIPLACE Line Level Software products.
All documented rules are listing the ports for informational purpose. These are not part of the firewall rules which will be created, except the rules which are
marked with “Port” in the first column.
Additionally, only inbound rules will be created in Product Setups.
5.1.1 SIPLACE Support Media
Depending of the product which will be installed, the Support Media will activate the appropriate Microsoft Windows features and corresponding firewall rules.
When the name resolution of NetBIOS is required in a workgroup mode, the file and printer sharing will be activated.
Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
Message Queuing
Built-in rule
Message Queuing
TCP Inbound
%SYSTEMROOT%
\SYSTEM32\mqsvc
.exe
N/A
Inbound
TCP
All
Message Queuing TCP Inbound
Message Queuing
Built-in rule
Message Queuing
UDP Inbound
%SYSTEMROOT%
\SYSTEM32\mqsvc
.exe
N/A
Inbound
UDP
All
Message Queuing UDP Inbound
Message Queuing
Built-in rule
Message Queuing
TCP Outbound
%SYSTEMROOT%
\SYSTEM32\mqsvc
.exe
N/A
Outbound
TCP
All
Message Queuing TCP Outbound
Message Queuing
Built-in rule
Message Queuing
UDP Inbound
%SYSTEMROOT%
\SYSTEM32\mqsvc
.exe
N/A
Outbound
UDP
All
Message Queuing UDP Outbound
Built-in rule
File and Printer
Sharing (Echo
Request - ICMPv4-In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Support Media 2.0 12/2014 Edition
32
Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
Built-in rule
File and Printer
Sharing (Echo
Request - ICMPv6-In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (LLMNR-
UDP-Out)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (LLMNR-
UDP-In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (Echo
Request - ICMPv6-
Out)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (Echo
Request - ICMPv4-
Out)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (NB-
Datagram-Out)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (NB-
Datagram-In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (NB-Name-
Out)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (NB-Name-In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (SMB-Out)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (SMB-In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Built-in rule
File and Printer
Sharing (NB-Session-
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
Support Media 2.0 12/2014 Edition
33
Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
Out)
resolution
Built-in rule
File and Printer
Sharing (NB-Session-
In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Application
Microsoft Distributed
Transaction
Coordinator
%SYSTEMROOT%
\SYSTEM32\MSDT
C.EXE
N/A
Inbound
ANY
ANY
Rule for allowing MSDTC
communication
Built-in rule
COM+ Network
Access (DCOM-In)
%SYSTEMROOT%
\SYSTEM32\svcho
st.exe
RpcSS
Inbound
TCP
135
System Firewall Rule, which has to
be activated COM+ network access
Built-in rule
World Wide Web
Services (HTTPS
Traffic-In)
system
N/A
Inbound
TCP
443
Allows IIS remote access
Built-in rule
World Wide Web
Services (HTTP
Traffic-In)
system
N/A
Inbound
TCP
80
Allows IIS remote access
Built-in rule
Web Management
Service (HTTP Traffic-
In)
system
N/A
Inbound
TCP
8172
Allows IIS remote access
Application (rules
created for found
SQL installations
SQL 2008R2 )
SIPLACE
SQLSERVR.EXE
(<InstanceName>)
<Path to
SQLSERVR.EXE of
found SQL
instance>
N/A
Inbound
TCP
ANY
Rule for allowing remote access to
SQL via TCP
Application (rules
created for found
SQL installations
SQL 2008R2 )
SIPLACE
SQLBROWSER.EXE
<Path to App of
Service with
sqlbrowser.exe in
path, e.g.
C:\Program Files
(x86)\Microsoft
SQL
Server\90\Shared\s
qlbrowser.exe>
N/A
Inbound
TCP
ANY
Rule for allowing remote access to
SQL via TCP
Application (rules
created for found
SQL installations
SQL 2008R2 )
SIPLACE
SQLBROWSER.EXE
(UDP)
<Path to App of
Service with
sqlbrowser.exe in
path, e.g.
N/A
Inbound
UDP
ANY
Rule for allowing remote access to
SQL via UDP