Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Ports to open in Checkpoint Firewall for Windows Clients / DC Active Directory Communications

Posted on 2016-09-30
5
Medium Priority
?
621 Views
Last Modified: 2016-10-01
Hello All -

Looks like we will be installing a new Checkpoint firewall between some of our Windows 10 Enterprise client machines and our Widows Server 2012 R2 Domain Controller soon. I wanted to do some homework to see what ports would need to be open to allow the required communications for Active Directory to pass through the firewall. With a few quick searches I did get some hits on DC to DC communications, but I'm just concerned with client to DC at this point.

Thanks!
0
Comment
Question by:Wookie68
  • 3
  • 2
5 Comments
 
LVL 58

Accepted Solution

by:
McKnife earned 2000 total points
ID: 41824677
0
 

Author Comment

by:Wookie68
ID: 41824787
Thanks for the link, but I didn't see anything about Client to Server communications. The table specified that it was DC to DC. Are they the same for Client to Server? I'd like to not open up more than what is truly necessary.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 41824823
MS is again bad at documentation. They write DC to DC, but the table holds all sorts of client2DC ports as well as seen in the description of the single items. ->You can use it.
0
 
LVL 58

Expert Comment

by:McKnife
ID: 41824826
0
 

Author Closing Comment

by:Wookie68
ID: 41824838
Thanks for the links and clarifications! With the info you provided and the firewall logs themselves I should be able to narrow things down to the minimum needed. Thanks again!
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question