00197214_IM_SupportMediaV1.15_EN.pdf - 第29页

Support Media V1.15 10/2013 Edition 29 5 Appendix 5.1 Firewall Rules This chapter contains t he firewall rules configured b y the SIPLACE Line Level Sof tware products. This section should be m aintained b y the Projects…

Support Media V1.15 10/2013 Edition

If you have an own Microsoft SQL Server license and installation, you have the responsibility to

install and maintain your Microsoft SQL Server by yourself. In this case, use Prerequisite Analyzer

from Support Media on your already installed Microsoft SQL Server, select the SIPLACE Products

you plan to use and Prerequisite Analyzer will show you if it requires upgrading your Microsoft SQL

Server installation to a newer version. Unfortunately, in cases where upgrades are required, we are

not allowed to deliver the updates for your SQL Server directly. So, in this case, Prerequisite

Analyzer will show you the required Microsoft SQL service pack version but abort installation with

an “Unavailable Installation Packages” message as answered in the question above. You may

contact SIPLACE support if you have problems retrieving or installation the required Microsoft SQL

Server update. After you updated your Microsoft SQL Server to the required version, you may

continue preparing your computer for the SIPLACE Products you purchased.

2) SIPLACE personnel preparing computer with SQL license sold by SIPLACE:

First, you should install SQL Server Prerequisites using Prerequisite Analyzer from Support Media

with the appropriate “SQL Server Prerequisites” profile in the Profile Group “SIPLACE Net”. Then,

install the Microsoft SQL Server Edition we sell to the customer. At last, use Prerequisite Analyzer

to complete the preparation for your SIPLACE Line Software. In the last step, Prerequisite Analyzer

will detect already installed Microsoft SQL Server and not try to install Microsoft SQL Express.

Additionally, if you use our internal variant of Support Media including all packages, Prerequisite

Analyzer will upgrade the Microsoft SQL Server installation to the latest service pack compatible

with chosen product versions.

You should read our documentation on the Support Media for manual installation of the Microsoft

SQL Server version. It describes how to prepare for and install Microsoft SQL Server using the

settings required for SIPLACE Products.

3) SIPLACE personnel supporting computer with Microsoft SQL license from the customer:

In this case, the customer (or his IT) is responsible for maintaining his Microsoft SQL Server

installation. You may use Prerequisite Analyzer from Support Media to find out if upgrading to a

newer Microsoft SQL Service Pack is required. Since we are not allowed to distribute the Microsoft

SQL Service Pack for this license, the customer has to download/install the required Microsoft SQL

Service Pack by himself – maybe with our help.

I’ve already used Support Media Prerequisite Analyzer and accidently installed Microsoft

SQL Express, but I want to install Microsoft SQL Server. What should I do?

If it is affordable, we recommend performing a fresh setup of your computer with a new operating

system installation and then beginning with Microsoft SQL Server installation as documented. If this

would be too time-consuming, we recommend additionally installing Microsoft SQL Server using

the appropriate documentation on Support Media and then re-applying Prerequisite Analyzer to

upgrade to the latest compatible service pack.

We don’t recommend trying uninstalling existing Microsoft SQL versions - Microsoft SQL Setups

may leave shared components when uninstalling, which can cause subsequent Microsoft SQL

setups to fail.

Support Media V1.15 10/2013 Edition

5 Appendix

5.1 Firewall Rules

This chapter contains the firewall rules configured by the SIPLACE Line Level Software products.

This section should be maintained by the Projects to collect the network resources used by the SIPLACE applications.

All documented rules are listing the ports for informational purpose. These are not part of the firewall rules which will be created, except the rules

which are marked with “Port” in the first column.

Additionally, only inbound rules will be created in Product Setups.

5.1.1 SIPLACE Support Media

Depending of the product which will be installed, the Support Media will activate the appropriate Microsoft Windows features and corresponding

firewall rules. When the name resolution of NetBIOS is required in a Workgroup Mode, the File and Printer Sharing will be activated.

The following rules are especially for Microsoft Windows XP / Microsoft Windows Server 2003:

XP/W2003 Rules

Name Of The Rule

Path

Service

Name

Direction

Protocol(s

)

Ports

Purpose

Application

SIPLACE Mqsvc.exe (MSMQ)

%SYSTEMROOT%\SYSTEM32\mqsv

c.exe

N/A

Inbound

Any

All

Message Queuing

Inbound

File and Printer

Sharing (built-in

rule for service)

File and Printer Sharing

N/A

Inbound

TCP/UDP

TCP 139,

TCP 445,

UDP 137,

UDP 138

Built-in Service rule for

File and Printer Sharing

Support Media V1.15 10/2013 Edition

XP/W2003 Rules

Name Of The Rule

Path

Service

Name

Direction

Protocol(s

)

Ports

Purpose

Application

Microsoft_Distributed_Transaction_C

oordinator

%SYSTEMROOT%\SYSTEM32\MSD

TC.EXE

N/A

Inbound

ANY

Rule for allowing

MSDTC communication

Port (COM+

Network Access)

SIPLACE Port TCP 135 (COM+)

N/A

Inbound

TCP

135

Globally open TCP Port

135 for COM+ network

access

Port (Internet

Information

Services (IIS))

SIPLACE Port TCP 80 (IIS HTTP)

N/A

Inbound

TCP

Globally open TCP Port

80 for IIS HTTP access

Port (Internet

Information

Services (IIS))

SIPLACE Port TCP 443 (IIS HTTPS)

N/A

Inbound

TCP

443

Globally open TCP Port

443 for IIS HTTPS

access

Application

(Rules created

for found SQL

installations >=

SQL 2008R2 )

SIPLACE SQLSERVR.EXE

(<InstanceName>)

<Path to SQLSERVR.EXE of found

SQL instance>

N/A

Inbound

ANY

Rule for allowing remote

access to SQL

Application

(Rules created

for found SQL

installations >=

SQL 2008R2

SIPLACE SQLBROWSER.EXE

<Path to App of Service with

sqlbrowser.exe in path, e.g.

C:\Program Files (x86)\Microsoft SQL

Server\90\Shared\sqlbrowser.exe>

N/A

Inbound

ANY

Rule for allowing remote

access to SQL

Port (W32Time

Service)

SIPLACE Port UDP 123 (W32Time

Service)

N/A

Inbound

UDP

123

Rule for allowing the

Windows Time Service

to host time for other

computers

Application

(Tomcat)

SIPLACE Tomcat5.exe (TCP In)

<Path to Tomcat5.exe of Tomcat

Service>

N/A

Inbound

ANY

Rule for allowing remote

access to Tomcat5

Webserver

The following rules are appropriate with Microsoft Windows Vista and newer:

Vista+ Rules

Name Of The Rule

Message

Queuing

Build in Rule

Message Queuing TCP Inbound

%SYSTEMROOT%\SYSTEM32\mqsv

c.exe

N/A

Inbound

TCP

All

Message Queuing TCP

Inbound

Message

Queuing

Build in Rule

Message Queuing UDP Inbound

%SYSTEMROOT%\SYSTEM32\mqsv

c.exe

N/A

Inbound

UDP

All

Message Queuing UDP

Inbound

Message

Queuing

Message Queuing TCP Outbound

%SYSTEMROOT%\SYSTEM32\mqsv

c.exe

N/A

Outbound

TCP

All

Message Queuing TCP

Outbound