00197214_IM_SupportMediaV1.14_EN.pdf - 第40页
Support M edia V1. 14 11/2012 Edit ion 40 insta llatio ns >= SQL 2008R2 ) to SQL via UDP Port (W 32Time Service) SIPLACE Port UD P 123 (W 32Tim e Service) N/A N/A Inbound UDP 123 Rule for allowing the Windows Ti Servi…
Support Media V1.14 11/2012 Edition
39
name
resolution
Application
Microsoft_Distributed_Transaction_Coordinator
%SYSTEMROOT%\SYSTEM32\MSDTC.EXE
N/A
Inbound
ANY
ANY
Rule for
allowing
MSDTC
communicat
Built- in
Rule
COM+ Network Access (DCOM-In)
%SYSTEMROOT%\SYSTEM32\svchost.exe
RpcSs
Inbound
TCP
135
System
Firewall Ru
which has to
be activated
COM+
network acc
Built- in
Rule
World Wide Web Services (HTTPS Traffic-In)
system
N/A
Inbound
TCP
443
Allows IIS
remote acce
Built- in
Rule
World Wide Web Services (HTTP Traffic-In)
system
N/A
Inbound
TCP
80
Allows IIS
remote acce
Built- in
Rule
Web Management Service (HTTP Traffic-In)
system
N/A
Inbound
TCP
8172
Allows IIS
remote acce
Application
(Rules
created for
found SQL
installations
>= SQL
2008R2 )
SIPLACE SQLSERVR.EXE (<InstanceName>)
<Path to SQLSERVR.EXE of found SQL
instance>
N/A
Inbound
TCP
ANY
Rule for
allowing
remote acce
to SQL via
TCP
Application
(Rules
created for
found SQL
installations
>= SQL
2008R2 )
SIPLACE SQLBROWSER.EXE
<Path to App of Service with sqlbrowser.exe
in path, e.g. C:\Program Files (x86)\Microsoft
SQL Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
TCP
ANY
Rule for
allowing
remote acce
to SQL via
TCP
Application
(Rules
created for
found SQL
SIPLACE SQLBROWSER.EXE (UDP)
<Path to App of Service with sqlbrowser.exe
in path, e.g. C:\Program Files (x86)\Microsoft
SQL Server\90\Shared\sqlbrowser.exe>
N/A
Inbound
UDP
ANY
Rule for
allowing
remote acce
Support Media V1.14 11/2012 Edition
40
installations
>= SQL
2008R2 )
to SQL via
UDP
Port
(W32Time
Service)
SIPLACE Port UDP 123 (W32Time Service)
N/A
N/A
Inbound
UDP
123
Rule for
allowing the
Windows Ti
Service to h
time for oth
computers
Application
(Tomcat)
SIPLACE Tomcat5.exe (TCP In)
<Path to Tomcat5.exe of Tomcat Service>
N/A
Inbound
TCP
ANY
Rule for
allowing
remote acce
to Tomcat5
Webserver
v
TCP
4.1.2 SIPLACE Pro Server
POC: Lutz Kern
The following rules are especially for Windows XP / Windows Server 2003:
SIPLACE Pro
Server
XP/W2003
Rules
Name of the
Rule
Path
Service
Name
Direction
Protocol(s)
Ports
Purpose
Application
(DCOM
Communication)
SIPLACE
Dllhost.exe
(DCOM)
%system32%\system32\dllhost.exe
N/A
Inbound
Any
All
Allow access via
DCOM protocol for
32 Bit host system
The following rules are appropriate with Windows Vista and newer:
Support Media V1.14 11/2012 Edition
41
SIPLACE
Pro Server
Vista+ Rules
Name of
the Rule
COM +
Application
SIPLACE
Pro Server
(DCOM In)
%system32%\system32\dllhost.exe
N/A
Inbound
TCP
RPC
Dynamic
Ports
Allow access to
the SIPLACE Pro
Server via DCOM
protocol for 32
Bit host system
COM +
Application
SIPLACE
Pro Server
* (DCOM
In)
%system32%\SysWOW64\dllhost.exe
N/A
Inbound
TCP
RPC
Dynamic
Ports
Allow access to
the SIPLACE Pro
Server via DCOM
protocol for 64
Bit host system
4.1.3 SIPLACE Pro Desk
POC: Chris Wunn
SIPLACE Pro
Desk
Name of
the Rule
N/A
N/A
N/A
N/A
N/A
N/A
N/A
N/A
4.1.4 SIPLACE Pro Datamaintainace Tool (ComponentShapeFiducialUpgrade.exe)
POC: Herbert Pfaffinger
Component
Shape
Fiducial
Upgrade.exe
Name of
the Rule