00197214_IM_SupportMediaV1.15_EN.pdf - 第30页

Support Media V1.15 10/2013 Edition 30 XP/W2003 Rules Name Of The Rule Path Service Name Direction Protocol(s ) Ports Purpose Application Microsoft_Distribu ted_Transa ction_C oordinator %SYSTEMROOT %\SYSTEM 32\MSD TC.EX…

100%1 / 49
Support Media V1.15 10/2013 Edition
29
5 Appendix
5.1 Firewall Rules
This chapter contains the firewall rules configured by the SIPLACE Line Level Software products.
This section should be maintained by the Projects to collect the network resources used by the SIPLACE applications.
All documented rules are listing the ports for informational purpose. These are not part of the firewall rules which will be created, except the rules
which are marked with “Port” in the first column.
Additionally, only inbound rules will be created in Product Setups.
5.1.1 SIPLACE Support Media
Depending of the product which will be installed, the Support Media will activate the appropriate Microsoft Windows features and corresponding
firewall rules. When the name resolution of NetBIOS is required in a Workgroup Mode, the File and Printer Sharing will be activated.
The following rules are especially for Microsoft Windows XP / Microsoft Windows Server 2003:
XP/W2003 Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s
)
Ports
Purpose
Application
SIPLACE Mqsvc.exe (MSMQ)
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Inbound
Any
All
Message Queuing
Inbound
File and Printer
Sharing (built-in
rule for service)
File and Printer Sharing
N/A
N/A
Inbound
TCP/UDP
TCP 139,
TCP 445,
UDP 137,
UDP 138
Built-in Service rule for
File and Printer Sharing
Support Media V1.15 10/2013 Edition
30
XP/W2003 Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s
)
Ports
Purpose
Application
Microsoft_Distributed_Transaction_C
oordinator
%SYSTEMROOT%\SYSTEM32\MSD
TC.EXE
N/A
Inbound
ANY
ANY
Rule for allowing
MSDTC communication
Port (COM+
Network Access)
SIPLACE Port TCP 135 (COM+)
N/A
N/A
Inbound
TCP
135
Globally open TCP Port
135 for COM+ network
access
Port (Internet
Information
Services (IIS))
SIPLACE Port TCP 80 (IIS HTTP)
N/A
N/A
Inbound
TCP
80
Globally open TCP Port
80 for IIS HTTP access
Port (Internet
Information
Services (IIS))
SIPLACE Port TCP 443 (IIS HTTPS)
N/A
N/A
Inbound
TCP
443
Globally open TCP Port
443 for IIS HTTPS
access
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLSERVR.EXE
(<InstanceName>)
<Path to SQLSERVR.EXE of found
SQL instance>
N/A
Inbound
ANY
ANY
Rule for allowing remote
access to SQL
Application
(Rules created
for found SQL
installations >=
SQL 2008R2
SIPLACE SQLBROWSER.EXE
<Path to App of Service with
sqlbrowser.exe in path, e.g.
C:\Program Files (x86)\Microsoft SQL
Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
ANY
ANY
Rule for allowing remote
access to SQL
Port (W32Time
Service)
SIPLACE Port UDP 123 (W32Time
Service)
N/A
N/A
Inbound
UDP
123
Rule for allowing the
Windows Time Service
to host time for other
computers
Application
(Tomcat)
SIPLACE Tomcat5.exe (TCP In)
<Path to Tomcat5.exe of Tomcat
Service>
N/A
Inbound
ANY
ANY
Rule for allowing remote
access to Tomcat5
Webserver
The following rules are appropriate with Microsoft Windows Vista and newer:
Vista+ Rules
Name Of The Rule
Message
Queuing
Build in Rule
Message Queuing TCP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Inbound
TCP
All
Message Queuing TCP
Inbound
Message
Queuing
Build in Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Inbound
UDP
All
Message Queuing UDP
Inbound
Message
Queuing
Message Queuing TCP Outbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Outbound
TCP
All
Message Queuing TCP
Outbound
Support Media V1.15 10/2013 Edition
31
Vista+ Rules
Name Of The Rule
Build in Rule
Message
Queuing
Build in Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Outbound
UDP
All
Message Queuing UDP
Outbound
Build in Rule
File and Printer Sharing (Echo
Request - ICMPv4-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Build in Rule
File and Printer Sharing (Echo
Request - ICMPv6-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (LLMNR-
UDP-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (LLMNR-
UDP-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (Echo
Request - ICMPv6-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (Echo
Request - ICMPv4-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Datagram-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Datagram-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-Name-
Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-Name-
In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (SMB-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name