?
Solved

what ports on Exchange 2010 are required to communicate with Outlook through a firewall via a VPN?

Posted on 2011-05-06
11
Medium Priority
?
798 Views
Last Modified: 2012-05-11
What ports on Exchange 2010 does it use to communicate with Outlook through a firewall via a VPN?

To put it simply here is the scenario:

user connects to  Firepass VPN....once on the VPN they open up a local copy of Outlook on their PC.  We were having an issue with the firewall blocking access.  had my admin look at teh logs and we determined that the firewall was blocking access on ports 12745 and 12838.  Once he opened those ports Outlook opened fine.


It has worked great for a week but today we ran into the same issue where Outlook could not connect to Exchange 2010 over the VPN.  Looked at logs and discovered that ports 44883 and 44984 were now being denied by the firewall.


Seems like these ports requested  by Exchange 2010 are being denied by the firewall and they change...

Any ideas on what ports need to be open on the firewall on a consistent basis?  Sure we can keep adding these ports to be open on the firewall but looks like they may keep changing


Any help appreciated
0
Comment
Question by:BlueGoose
  • 6
  • 5
11 Comments
 
LVL 8

Expert Comment

by:steinmto
ID: 35706310
0
 
LVL 8

Expert Comment

by:steinmto
ID: 35706328
I would use outlook anywhere with a cert then you do not have to work about the vpn and ports.
0
 
LVL 8

Expert Comment

by:steinmto
ID: 35706335
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:BlueGoose
ID: 35706382
Thanks for the quick answer however Outlook Anywhere is not an option at this point.  We do use OWA and that works fine but certain people with more stripes prefer to use local copy of Outlook and not OWA, hence I have to find out what ports are used and how I can keep that port that Exchange 2010 needs consistent (if that makes sense)
0
 
LVL 8

Expert Comment

by:steinmto
ID: 35706421
Outlook connects via MAPI which in turn uses RPC, you need port 135 and all ports over 1024 open for RPC which is why it's such a horrible security hole.

0
 

Author Comment

by:BlueGoose
ID: 35706441
iirc on our Exchange 2003 server we have 3 specific ports open to allow Outlook to communicate  via the VPN thru the firewall...I was hoping that a similar setup could be done with Exchange 2010?
0
 
LVL 8

Accepted Solution

by:
steinmto earned 2000 total points
ID: 35706464
0
 

Author Comment

by:BlueGoose
ID: 35707743
I guess I need to figure out how to configure static RPC ports on Exchange 2010 Client access server?  I found an article how to do it but it involves changing the registry.....not sure how that will affect internal users who don't use the VPN?  

Did a netstat on my exchange server and looks like every connection established from outlook is either 44883 or 44984....not sure when or if that will change
0
 
LVL 8

Expert Comment

by:steinmto
ID: 35707930
It looks like it will unless you do the static rpc ports.
0
 

Author Comment

by:BlueGoose
ID: 35788450
Is the only place to make changes on the Server itself for static ports?  Or do clients need to make changes as well?
0
 

Author Closing Comment

by:BlueGoose
ID: 35887647
Explained it perfectly

Thanks
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
There can be many situations demanding the conversion of Outlook OST files to PST format and as such, there is no shortage of automated tools to perform this conversion. However, what makes Stellar OST to PST converter stand above the rest? Let us e…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses
Course of the Month16 days, 17 hours left to enroll

864 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question