Share via

Ports to be allowed

Roger Roger 7,631 Reputation points
2021-07-27T13:47:29.85+00:00

Hi All

i am new to configuration manager. i need to add a boundary i.e add a new subnet and associate it with boundary group.
lets say i have a new subnet 192.168.50.0. I have primary site server configmgr01 and a distribution point configdp01.
i need to allow the ports on firewall so that my servers in the new subnet can communicate with the primary site server and distribution points and i can push updates and install applications.
Will the below ports are enough to be allowed on the firewall, and are the ports unidirectional or bidirectional. please guide me.

Source: 192.168.50.0/24
Destination: configmgr01 & configdp01
Ports: 80/443/8530/8531

Microsoft Security | Intune | Configuration Manager | Updates
Microsoft Security | Intune | Configuration Manager | Other
0 comments

Answer accepted by question author

HanyunZhu-MSFT 1,846 Reputation points Microsoft External Staff
2021-07-28T02:44:17.063+00:00

Hi @Roger Roger ,

Thanks for posting in Microsoft Q&A forum.

Port 445 and 135 are also need to be opened. And one way is enough for a standard Distribution Point, all distribution is initiated by the Primary site server by the Package Transfer Manager.
Please refer to the following information:
Site Server --> Distribution Point (unidirectional)
Server Message Block(SMB) 445 TCP
RPC Endpoint Mapper 135 UDP and TCP
Site Server --> Cloud Distribution Point (unidirectional)
HTTPS 443 TCP

For more details, the article provided by GarthJones is great, we could use that as a reference：
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

If the response is helpful, please click "Accept Answer"and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Was this answer helpful?

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Garth Jones 1,366 Reputation points
    2021-07-27T15:06:01.667+00:00

    Here is the list of Port that are required for everything. https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.