Port to be allowed for agent to server communication and for windows updates.

Question

Hi All

i have a primary site server, 1 wsus server and 4 distribution points. my primary site server and wsus server also acts as distribution points. i have 5 subnets added to the boundaries and boundary groups are defined.

For my windows servers to communicate with sccm server( i.e agent to server communication) as well as to get updates, install applications from the distribution points. By Allowing the bidirectional ports 80/443/8530/8531 in firewall to the subnets defined in boundary groups to my siteserver, wsus server, distribution points will this work for me?

Answer 1

Hi, @Glenn Maxwell
Thank you for posting in Microsoft Q&A forum.

80/443 is allowed for DP and MP server.
8530/8531 is allowed for SUP server.
If you just want to get updates, install applications, these ports are enough.
For other ports to use:
https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

does it require bidirectional ports to be allowed?