00197214_IM_SupportMediaV1.14_EN.pdf - 第35页

Support M edia V1. 14 11/2012 Edit ion 35 Applic atio n Microsof t_Distri buted_T ransa ction_Coor dinator %SYST EMRO OT % \ SYSTEM 32 \M SDT C.EXE N/A Inbound ANY ANY Rule for allowing MSDTC communica tion Port (COM+ Ne…

100%1 / 63
Support Media V1.14 11/2012 Edition
34
4.1 Firewall Rules
This chapter contains the firewall rules configured by the SIPLACE Line Level Software products.
This section should be maintained by the Projects to collect the network resources used by the SIPLACE applications.
All documented rules are listing the ports for informational purpose. These are not part of the firewall rules which will be created, except the rules
which are marked with “Port” in the first column.
Additionally, only inbound rules will be created in Product Setups.
4.1.1 SIPLACE Support media
POC: Sebastian Kajan
Depending of the product which will be installed, the Support Media will activate the appropriate Windows features and corresponding firewall rules.
When the name resolution of NetBios is required in a Workgroup Mode the File and Printer Sharing will be activated.
The following rules are especially for Windows XP / Windows Server 2003:
XP/W2003
Rules
Name of the Rule
Path
Service
Name
Direction
Protoco
l(s)
Ports
Purpose
Application
SIPLACE Mqsvc.exe
(MSMQ)
%SYSTEMROOT%\SYSTEM
32\mqsvc.exe
N/A
Inbound
Any
All
Message Queuing
Inbound
File and
Printer
Sharing (built-
in rule for
service)
File and Printer Sharing
N/A
N/A
Inbound
TCP/U
DP
TCP 139,
TCP 445,
UDP 137,
UDP 138
Built-in Service
rule for File and
Printer Sharing
Support Media V1.14 11/2012 Edition
35
Application
Microsoft_Distributed_Transa
ction_Coordinator
%SYSTEMROOT%\SYSTEM
32\MSDTC.EXE
N/A
Inbound
ANY
ANY
Rule for allowing
MSDTC
communication
Port (COM+
Network
Access)
SIPLACE Port TCP 135
(COM+)
N/A
N/A
Inbound
TCP
135
Globally open TCP
Port 135 for COM+
network access
Port (Internet
Information
Services (IIS))
SIPLACE Port TCP 80 (IIS
HTTP)
N/A
N/A
Inbound
TCP
80
Globally open TCP
Port 80 for IIS
HTTP access
Port (Internet
Information
Services (IIS))
SIPLACE Port TCP 443 (IIS
HTTPS)
N/A
N/A
Inbound
TCP
443
Globally open TCP
Port 443 for IIS
HTTPS access
Application
(Rules
created for
found SQL
installations
>= SQL
2008R2 )
SIPLACE SQLSERVR.EXE
(<InstanceName>)
<Path to SQLSERVR.EXE
of found SQL instance>
N/A
Inbound
ANY
ANY
Rule for allowing
remote access to
SQL
Application
(Rules
created for
found SQL
installations
>= SQL
2008R2
SIPLACE
SQLBROWSER.EXE
<Path to App of Service
with sqlbrowser.exe in path,
e.g. C:\Program Files
(x86)\Microsoft SQL
Server\90\Shared\sqlbrowse
r.exe>
N/A
Inbound
ANY
ANY
Rule for allowing
remote access to
SQL
Port
(W32Time
Service)
SIPLACE Port UDP 123
(W32Time Service)
N/A
N/A
Inbound
UDP
123
Rule for allowing
the Windows
Time Service to
host time for other
computers
Application
(Tomcat)
SIPLACE Tomcat5.exe (TCP
In)
<Path to Tomcat5.exe of
Tomcat Service>
N/A
Inbound
ANY
ANY
Rule for allowing
remote access to
Tomcat5
Webserver
Support Media V1.14 11/2012 Edition
36
The following rules are appropriate with Windows Vista and newer:
Vista+
Rules
Name of the Rule
Message
Queuing
Build in
Rule
Message Queuing TCP Inbound
%SYSTEMROOT%\SYSTEM32\mqsvc.exe
N/A
Inbound
TCP
All
Message
Queuing TCP
Inbound
Message
Queuing
Build in
Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsvc.exe
N/A
Inbound
UDP
All
Message
Queuing UDP
Inbound
Message
Queuing
Build in
Rule
Message Queuing TCP Outbound
%SYSTEMROOT%\SYSTEM32\mqsvc.exe
N/A
Outbound
TCP
All
Message
Queuing TCP
Outbound
Message
Queuing
Build in
Rule
Message Queuing UDP Inbound
%SYSTEMROOT%\SYSTEM32\mqsvc.exe
N/A
Outbound
UDP
All
Message
Queuing UDP
Outbound
Build in
Rule
File and Printer Sharing (Echo Request -
ICMPv4-In)
N/A
N/A
N/A
N/A
N/A
Built- in Ru
for File and
Printer Shar
and NetBIO
name
resolution
Build in
Rule
File and Printer Sharing (Echo Request -
ICMPv6-In)
N/A
N/A
N/A
N/A
N/A
Built- in Ru
for File and
Printer Shar
and NetBIO
name
resolution
Built- in
Rule
File and Printer Sharing (LLMNR-UDP-Out)
N/A
N/A
N/A
N/A
N/A
Built- in Ru
for File and