Ports to be allowed

Question

Hi All

i am new to configuration manager. i need to add a boundary i.e add a new subnet and associate it with boundary group.
lets say i have a new subnet 192.168.50.0. I have primary site server configmgr01 and a distribution point configdp01.
i need to allow the ports on firewall so that my servers in the new subnet can communicate with the primary site server and distribution points and i can push updates and install applications.
Will the below ports are enough to be allowed on the firewall, and are the ports unidirectional or bidirectional. please guide me.

Source: 192.168.50.0/24
Destination: configmgr01 & configdp01
Ports: 80/443/8530/8531

Answer 1

Hi @Roger Roger ,

Thanks for posting in Microsoft Q&A forum.

Port 445 and 135 are also need to be opened. And one way is enough for a standard Distribution Point, all distribution is initiated by the Primary site server by the Package Transfer Manager.
Please refer to the following information:
Site Server --> Distribution Point (unidirectional)
Server Message Block(SMB) 445 TCP
RPC Endpoint Mapper 135 UDP and TCP
Site Server --> Cloud Distribution Point (unidirectional)
HTTPS 443 TCP

For more details, the article provided by GarthJones is great, we could use that as a reference：
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

---

If the response is helpful, please click "Accept Answer"and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Here is the list of Port that are required for everything. https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports