Hi,
one of the apps we use needs port 443 open to work so was wondering if i have to do this on the firewall or is it possible to open a port on the actual server? This is on a 2003 server. Thanks.
Windows Server 2003Hardware Firewalls
Last Comment
davorin
8/22/2022 - Mon
davorin
It depends. If you want access to if from internet, then you need to open port 443 from firewall appliance between internet and your LAN AND it should be open also on firewall on your server. Plus you need to forward that port to server's IP address.
If you want to use that app only from your LAN, then you need to open it only on your server.
dankyle67
ASKER
Ok i found where to do that on our netscreen 5gt and i tested it using canyouseemee and it said connection refused which is ok since nothing is running on that port right now but at least it can get thru the firewall. Lets say the app we use needs access to a website and it needs port 443 open to access that site for some reason then how would i open that port on the server itself? Or can i also put a policy to allow 443 traffic from that server out to the internet using the netscreen policy from trust to untrust?
Opening outgoing traffic for port 443 will make no difference in your case. Anyway, probably you already have open that port toward the internet. In different case you would not be able to surf secure web pages.
Ok thanks, i am just confused by what the techs who support the app that needs access to 443 is telling me since like you said, if 443 was closed for outgoing traffic then the users on our network would not be able to access https sites and they all can so this is not necessary for me to do anything with this part. I have used netstat before to see what ports are currently connected on the server but is there any other command line that would identify or confirm that port 443 is open? I guess if we bring up the software and run the netstat then we should see that 443 connection is active correct?
If you want to use that app only from your LAN, then you need to open it only on your server.