00197214_IM_SupportMediaV1.15_EN.pdf - 第32页

Support Media V1.15 10/2013 Edition 32 Vista+ Rules Name Of The Rule resolution Built- in Rule File and Printer Sharing (SMB-In) N/A N/A N/A N/A N/A Built- in Rule for F ile and Printer Shar ing and NetBIOS name resoluti…

100%1 / 49
Support Media V1.15 10/2013 Edition
31
Vista+ Rules
Name Of The Rule
Build in Rule
Message
Queuing
Build in Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsv
c.exe
N/A
Outbound
UDP
All
Message Queuing UDP
Outbound
Build in Rule
File and Printer Sharing (Echo
Request - ICMPv4-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Build in Rule
File and Printer Sharing (Echo
Request - ICMPv6-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (LLMNR-
UDP-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (LLMNR-
UDP-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (Echo
Request - ICMPv6-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (Echo
Request - ICMPv4-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Datagram-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Datagram-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-Name-
Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-Name-
In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (SMB-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
Support Media V1.15 10/2013 Edition
32
Vista+ Rules
Name Of The Rule
resolution
Built- in Rule
File and Printer Sharing (SMB-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Session-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Built- in Rule
File and Printer Sharing (NB-
Session-In)
N/A
N/A
N/A
N/A
N/A
Built- in Rule for File
and Printer Sharing and
NetBIOS name
resolution
Application
Microsoft_Distributed_Transaction_C
oordinator
%SYSTEMROOT%\SYSTEM32\MSD
TC.EXE
N/A
Inbound
ANY
ANY
Rule for allowing
MSDTC communication
Built- in Rule
COM+ Network Access (DCOM-In)
%SYSTEMROOT%\SYSTEM32\svch
ost.exe
RpcSS
Inbound
TCP
135
System Firewall Rule,
which has to be
activated COM+
network access
Built- in Rule
World Wide Web Services (HTTPS
Traffic-In)
system
N/A
Inbound
TCP
443
Allows IIS remote
access
Built- in Rule
World Wide Web Services (HTTP
Traffic-In)
system
N/A
Inbound
TCP
80
Allows IIS remote
access
Built- in Rule
Web Management Service (HTTP
Traffic-In)
system
N/A
Inbound
TCP
8172
Allows IIS remote
access
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLSERVR.EXE
(<InstanceName>)
<Path to SQLSERVR.EXE of found
SQL instance>
N/A
Inbound
TCP
ANY
Rule for allowing remote
access to SQL via TCP
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLBROWSER.EXE
<Path to App of Service with
sqlbrowser.exe in path, e.g.
C:\Program Files (x86)\Microsoft SQL
Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
TCP
ANY
Rule for allowing remote
access to SQL via TCP
Application
(Rules created
for found SQL
installations >=
SQL 2008R2 )
SIPLACE SQLBROWSER.EXE
(UDP)
<Path to App of Service with
sqlbrowser.exe in path, e.g.
C:\Program Files (x86)\Microsoft SQL
Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
UDP
ANY
Rule for allowing remote
access to SQL via UDP
Port (W32Time
Service)
SIPLACE Port UDP 123 (W32Time
Service)
N/A
N/A
Inbound
UDP
123
Rule for allowing the
Windows Time Service
to host time for other
computers
Support Media V1.15 10/2013 Edition
33
Vista+ Rules
Name Of The Rule
Application
(Tomcat)
SIPLACE Tomcat5.exe (TCP In)
<Path to Tomcat5.exe of Tomcat
Service>
N/A
Inbound
TCP
ANY
Rule for allowing remote
access to Tomcat5
Webserver via TCP
5.1.2 SIPLACE Pro Server
The following rules are especially for Microsoft Windows XP / Microsoft Windows Server 2003:
SIPLACE Pro
Server
XP/W2003 Rules
Name Of The Rule
Path
Service
Name
Direction
Protocol(s
)
Ports
Purpose
Application
(DCOM
Communication)
SIPLACE Dllhost.exe (DCOM)
%system32%\system32\dllhost.exe
N/A
Inbound
Any
All
Allow access via DCOM
protocol for 32 Bit host
system
The following rules are appropriate with Windows Vista and newer:
SIPLACE Pro
Server
Vista+ Rules
Name Of The Rule
COM +
Application
SIPLACE Pro Server (DCOM In)
%system32%\system32\dllhost.exe
N/A
Inbound
TCP
RPC
Dynamic
Ports
Allow access to the
SIPLACE Pro Server via
DCOM protocol for 32
Bit host system
COM +
Application
SIPLACE Pro Server * (DCOM In)
%system32%\SysWOW64\dllhost.exe
N/A
Inbound
TCP
RPC
Dynamic
Ports
Allow access to the
SIPLACE Pro Server via
DCOM protocol for 64
Bit host system
5.1.3 SIPLACE Pro Desk
SIPLACE Pro
Desk
Name Of The Rule