Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1053
  • Last Modified:

What FW ports are needed for Zenprise MobileManager to BES?

We have just purchased Zenprise to monitor our BES environment.  The BES, Exchange and Zenprise environments are seperated by a FW.  

What IP ports need to be opened to allow the Zenprise solution to monitor BES and Exchange 2007/2010?
0
dataemancipator
Asked:
dataemancipator
1 Solution
 
tmeunierCommented:
Hi, the answer is that you will have to open so many ports that you may as well throw the firewall away. Put the Zenprise server behind the firewall, with the BES and Exchange servers.  The reason is that it requires:
SNMP from BES server
Filesystem from BES server
Synthetic transactions to Exchange and BES - not sure what they're doing but assume it's 80, 443, 25, and MAPI.
Discovery of AD and Exchange infrastructure: 53, 80, 88, 135, 123, 389, 445, 3268, and all between 1024-65535.  
source: http://support.microsoft.com/kb/270836

Your firewall is now swiss cheese and may as well not even be there.  I encourage you to place the server appropriately, rather than compromising your security by putting a hobbled firewall in place.
There is a whitepaper stating what services the product uses, at
http://www.zenprise.com/images/uploads/zenprise-MobileManager_TWP_Final.pdf

I hope this helps.

-tom
0

Featured Post

Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now