Link to home
Start Free TrialLog in
Avatar of anupam1983
anupam1983Flag for India

asked on

How to check for open ports in ISA servers?

Hi Experts,

I've been given a task to confirm few ports are open or not. I'm planning to use netstat command and tcpview tool. We are using ISA 2004. Could you please guide me if there is any other way to confirm them? And in tcpview I can see few status like

1.Listening  2.Established  3.Time-Wait.

I'm little confused as this is the first time I'm confused. Please guide.

Best Regards,
Anupam
Avatar of Brad Howe
Brad Howe
Flag of Canada image

Hmm.. This could be tricky but i wouldn't scan unless you are approved too. You don't want to set off IDS on the firewall.

Advanced Port Scanner 1.3
http://www.radmin.com/products/utilities/portscanner.php

This will scan a network range or single PC for open ports and closed ports.

Cheers,
Hades666
you could also use MS version

PortQry
http://support.microsoft.com/default.aspx?scid=kb;en-us;310099

ex:
portqry -n 10.10.23.24 -p tcp -r 1:2048 -l 10.10.23.24.txt

Cheers,
Hades666
Avatar of anupam1983

ASKER

Hey, thanks a lot! Yeah, u r right. I can't scan for the ports on ISA server, but I can try PortQry. Between, fi a port is open, will it be in Listening state or some other state?

Best Regards,
Anupam
What? Cause you can.

Drop out to a cmd prompt and type in netstat -an  - the output are the open ports on the ISA Server. What more did you want?

Keith
SOLUTION
Avatar of Brad Howe
Brad Howe
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Keith is correct to and you can filter that like such. I was mis-reading the question to test a firewall on incoming ports.

netstat -an | find /i "LISTENING"

But this will only list listening ports with services attached.

cheers,
Hades666
Hi Keith,

I've run the command < netstat -a | findstr /i listening > on ISA server. Does the staus Listening for a particular port means that it is open?

When I execute netstat -an, it shows a huge list. Some ports are showing as ESTABLISHED, some as LISTENING, some as CLOSE_WAIT.

Which status I should consider as "Opening"

Many thanks,
Anupam
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial