00197712-01_IM_SUPPORT_MEDIA_2.0_EN.pdf - 第34页

Support Media 2.0 12/2014 Edition 34 Rules Name Of The Rule Path Service Name Direction Protocol(s) Ports Purpose C: \Program Files (x86)\Microsoft SQL Server\ 90 \Shared\s qlbrowser.exe> Port (W 32Time Service) SIPLA…

100%1 / 44
Support Media 2.0 12/2014 Edition
33
Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
Out)
resolution
Built-in rule
File and Printer
Sharing (NB-Session-
In)
N/A
N/A
N/A
N/A
N/A
Built-in rule for File and Printer
Sharing and NetBIOS name
resolution
Application
Microsoft Distributed
Transaction
Coordinator
%SYSTEMROOT%
\SYSTEM32\MSDT
C.EXE
N/A
Inbound
ANY
ANY
Rule for allowing MSDTC
communication
Built-in rule
COM+ Network
Access (DCOM-In)
%SYSTEMROOT%
\SYSTEM32\svcho
st.exe
RpcSS
Inbound
TCP
135
System Firewall Rule, which has to
be activated COM+ network access
Built-in rule
World Wide Web
Services (HTTPS
Traffic-In)
system
N/A
Inbound
TCP
443
Allows IIS remote access
Built-in rule
World Wide Web
Services (HTTP
Traffic-In)
system
N/A
Inbound
TCP
80
Allows IIS remote access
Built-in rule
Web Management
Service (HTTP Traffic-
In)
system
N/A
Inbound
TCP
8172
Allows IIS remote access
Application (rules
created for found
SQL installations
SQL 2008R2 )
SIPLACE
SQLSERVR.EXE
(<InstanceName>)
<Path to
SQLSERVR.EXE of
found SQL
instance>
N/A
Inbound
TCP
ANY
Rule for allowing remote access to
SQL via TCP
Application (rules
created for found
SQL installations
SQL 2008R2 )
SIPLACE
SQLBROWSER.EXE
<Path to App of
Service with
sqlbrowser.exe in
path, e.g.
C:\Program Files
(x86)\Microsoft
SQL
Server\90\Shared\s
qlbrowser.exe>
N/A
Inbound
TCP
ANY
Rule for allowing remote access to
SQL via TCP
Application (rules
created for found
SQL installations
SQL 2008R2 )
SIPLACE
SQLBROWSER.EXE
(UDP)
<Path to App of
Service with
sqlbrowser.exe in
path, e.g.
N/A
Inbound
UDP
ANY
Rule for allowing remote access to
SQL via UDP
Support Media 2.0 12/2014 Edition
34
Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
C:\Program Files
(x86)\Microsoft
SQL
Server\90\Shared\s
qlbrowser.exe>
Port (W32Time
Service)
SIPLACE Port UDP
123 (W32Time
Service)
N/A
N/A
Inbound
UDP
123
Rule for allowing the Windows Time
Service to host time for other
computers
Application (Tomcat
5.x)
SIPLACE
Tomcat5.exe (TCP In)
<Path to
Tomcat5.exe of
Tomcat Service>
N/A
Inbound
TCP
ANY
Rule for allowing remote access to
Tomcat5 Webserver via TCP
Application (Tomcat
7.x)
SIPLACE
Tomcat7.exe (TCP In)
<Path to
Tomcat7.exe of
Tomcat Service>
N/A
Inbound
TCP
ANY
Rule for allowing remote access to
Tomcat7 Webserver via TCP
5.1.2 SIPLACE Pro Server
Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
COM + Application
SIPLACE Pro Server
(DCOM In)
%system32%\system32\
dllhost.exe
N/A
Inbound
TCP
RPC
Dynamic
Ports
Allow access to the
SIPLACE Pro Server
via DCOM protocol
for 32 Bit host system
COM + Application
SIPLACE Pro Server *
(DCOM In)
%system32%\SysWOW
64\dllhost.exe
N/A
Inbound
TCP
RPC
Dynamic
Ports
Allow access to the
SIPLACE Pro Server
via DCOM protocol
for 64 Bit host system
5.1.3 Desk Info Service (DeskInfo.exe)
Rules
Name Of The Rule
Path
Service Name
Direction
Protocol(s)
Ports
Purpose
Application
SIPLACE Pro DeskInfo
Service (SOAP TCP In)
%Program Files%\
SIPLACE\SIPLACE
Pro \DeskInfo.exe
N/A
Inbound
TCP
3375
Collects info about open
objects in SIPLACE Pro
applications to serialize them
when creating SIPLACE Pro
Error Reports
Support Media 2.0 12/2014 Edition
35
5.1.4 VtsAdapter (VtsAdapter.exe)
Rules
Name Of The Rule
Path
Service Name
Direction
Protocol(s)
Ports
Purpose
Application
SIPLACE Vision
Teach Station (TCP In)
%Program
Files%\SIPLACE\SIP
LACE
Pro\VtsAdapter.exe
N/A
Inbound
TCP
47310 -
47340
Allow TCP inbound
communication of VtsAdapter
Application
SIPLACE Vision
Teach Station (UDP
In)
%Program
Files%\SIPLACE\SIP
LACE
Pro\VtsAdapter.exe
N/A
Inbound
UDP
47310 -
47340
Allow UDP inbound
communication of VtsAdapter
5.1.5 SIPLACE Pro Line Control
Rules
Name Of The Rule
Path
Service Name
Direction
Protocol(s)
Ports
Purpose
Application
SIPLACE Line Control
(SOAP HTTP Out)
%Program
Files%\SIPLACE\SIP
LACE
Pro\LCSVR.exe
<Don’t filter
servicename –
doesn’t work>
Outbound
TCP(HTTP)
49001
Allow access to the
Station via HTTP
protocol
Application
SIPLACE Line Control
(SOAP TCP Out)
%Program
Files%\SIPLACE\SIP
LACE
Pro\LCSVR.exe
<Don’t filter
servicename –
doesn’t work>
Outbound
TCP
49002
Allow access to the
Station via TCP
protocol
Application
SIPLACE Line Control
(SOAP HTTP In)
%Program
Files%\SIPLACE\SIP
LACE
Pro\LCDSVR.exe
<Don’t filter
servicename –
doesn’t work>
Inbound
TCP(HTTP)
49003
Allow access to the
Line Control Server via
HTTP protocol
Application
SIPLACE Line Control
(SOAP TCP In)
%Program
Files%\SIPLACE\SIP
LACE
Pro\LCDSVR.exe
<Don’t filter
servicename –
doesn’t work>
Inbound
TCP
49004
Allow access to the
Line Control Server via
TCP protocol
Application
SIPLACE Line Control
(SOAP HTTP Out to
Setup Center)
%Program
Files%\SIPLACE\SIP
LACE
Pro\LCSVR.exe
<Don’t filter
servicename –
doesn’t work>
Outbound
HTTP
49041
Allow access to the
Setup Center via
HTTP protocol
net use
SIPLACE Line Control
(net use)
%Program
Files%\SIPLACE\SIP
LACE
Pro\LCSVR.exe
N/A
Outbound
NetBios
Protocol
139 / 445
Used to write files onto
some stations via
network share
Note: this rule is not