00197214_IM_SupportMediaV1.15_EN.pdf - 第31页

Support Media V1.15 10/2013 Edition 31 Vista+ Rules Name Of The Rule Build in Rule Message Queuing Build in Rule Message Queuing U DP Inbo und %SYSTEMROOT %\SYSTEM 32\mqsv c.exe N/A Outbound UDP All Message Queuing U DP …

100%1 / 49
Support Media V1.15 10/2013 Edition
30
XP/W2003 Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s
)
Ports
Purpose
Application
Microsoft_Distributed_Transaction_C
oordinator
%SYSTEMROOT%\SYSTEM32\MSD
TC.EXE
N/A
Inbound
ANY
ANY
Rule for allowing
MSDTC communication
Port (COM+
Network Access)
SIPLACE Port TCP 135 (COM+)
N/A
N/A
Inbound
TCP
135
Globally open TCP Port
135 for COM+ network
access
Port (Internet
Information
Services (IIS))
SIPLACE Port TCP 80 (IIS HTTP)
N/A
N/A
Inbound
TCP
80
Globally open TCP Port
80 for IIS HTTP access
Port (Internet
Information
Services (IIS))
SIPLACE Port TCP 443 (IIS HTTPS)
N/A
N/A
Inbound
TCP
443
Globally open TCP Port
443 for IIS HTTPS
access
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLSERVR.EXE
(<InstanceName>)
<Path to SQLSERVR.EXE of found
SQL instance>
N/A
Inbound
ANY
ANY
Rule for allowing remote
access to SQL
Application
(Rules created
for found SQL
installations >=
SQL 2008R2
SIPLACE SQLBROWSER.EXE
<Path to App of Service with
sqlbrowser.exe in path, e.g.
C:\Program Files (x86)\Microsoft SQL
Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
ANY
ANY
Rule for allowing remote
access to SQL
Port (W32Time
Service)
SIPLACE Port UDP 123 (W32Time
Service)
N/A
N/A
Inbound
UDP
123
Rule for allowing the
Windows Time Service
to host time for other
computers
Application
(Tomcat)
SIPLACE Tomcat5.exe (TCP In)
<Path to Tomcat5.exe of Tomcat
Service>
N/A
Inbound
ANY
ANY
Rule for allowing remote
access to Tomcat5
Webserver
The following rules are appropriate with Microsoft Windows Vista and newer:
Vista+ Rules
Name Of The Rule
Message
Queuing
Build in Rule
Message Queuing TCP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Inbound
TCP
All
Message Queuing TCP
Inbound
Message
Queuing
Build in Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Inbound
UDP
All
Message Queuing UDP
Inbound
Message
Queuing
Message Queuing TCP Outbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Outbound
TCP
All
Message Queuing TCP
Outbound
Support Media V1.15 10/2013 Edition
31
Vista+ Rules
Name Of The Rule
Build in Rule
Message
Queuing
Build in Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Outbound
UDP
All
Message Queuing UDP
Outbound
Build in Rule
File and Printer Sharing (Echo
Request - ICMPv4-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Build in Rule
File and Printer Sharing (Echo
Request - ICMPv6-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (LLMNR-
UDP-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (LLMNR-
UDP-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (Echo
Request - ICMPv6-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (Echo
Request - ICMPv4-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Datagram-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Datagram-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-Name-
Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-Name-
In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (SMB-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
Support Media V1.15 10/2013 Edition
32
Vista+ Rules
Name Of The Rule
resolution
Built- in Rule
File and Printer Sharing (SMB-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Session-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Session-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Application
Microsoft_Distributed_Transaction_C
oordinator
%SYSTEMROOT%\SYSTEM32\MSD
TC.EXE
N/A
Inbound
ANY
ANY
Rule for allowing
MSDTC communication
Built- in Rule
COM+ Network Access (DCOM-In)
%SYSTEMROOT%\SYSTEM32\svch
ost.exe
RpcSS
Inbound
TCP
135
System Firewall Rule,
which has to be
activated COM+
network access
Built- in Rule
World Wide Web Services (HTTPS
Traffic-In)
system
N/A
Inbound
TCP
443
Allows IIS remote
access
Built- in Rule
World Wide Web Services (HTTP
Traffic-In)
system
N/A
Inbound
TCP
80
Allows IIS remote
access
Built- in Rule
Web Management Service (HTTP
Traffic-In)
system
N/A
Inbound
TCP
8172
Allows IIS remote
access
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLSERVR.EXE
(<InstanceName>)
<Path to SQLSERVR.EXE of found
SQL instance>
N/A
Inbound
TCP
ANY
Rule for allowing remote
access to SQL via TCP
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLBROWSER.EXE
<Path to App of Service with
sqlbrowser.exe in path, e.g.
C:\Program Files (x86)\Microsoft SQL
Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
TCP
ANY
Rule for allowing remote
access to SQL via TCP
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLBROWSER.EXE
(UDP)
<Path to App of Service with
sqlbrowser.exe in path, e.g.
C:\Program Files (x86)\Microsoft SQL
Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
UDP
ANY
Rule for allowing remote
access to SQL via UDP
Port (W32Time
Service)
SIPLACE Port UDP 123 (W32Time
Service)
N/A
N/A
Inbound
UDP
123
Rule for allowing the
Windows Time Service
to host time for other
computers