Open Ports on FW?

  • Thread starter Thread starter earl
  • Start date Start date
E

earl

Has any one figured out which ports on the firwall need
to be open to allow cross-domain authentication..

Where the clients & DC's reside behind a firewalls

IE

Client & DC (domain 1) \FW-VPN-FW\ Clients & DC (domain 2)

Full (two way) Trust between domains 1 & 2

Client from 2 logs on to PC in 1 what ports on FW are
needed.
 
Suggest you work with your FW admin to sniff for packets
via the FW log/monitor originating from a test workstation
(w.x.y.z) and observe responses to request sent your pdc
(a.b.c.d). This should allow you to reverse-engineer the
ports requested and provision appropriate FW rules to
facilitate your cross domain connection needs.

Good luck.
 
Thanks Marc

But, I was hoping to close all random ports >1024 or at
least set the intial port for RPC; like you can set on
the DC's

earl
 
Back
Top