Firewall ports required between domain controllers and Exchange servers

Question

We have a situation in the environment, Domain controllers are hosted by a vendor and their data center and Exchange servers are hosted by a different vendor in their data center. We have a request from Exchange application team to open ANY to Any communication between domain controllers and Exchange servers. This request is being rejected by the Company Security and Firewall team. Can someone had this experience? and Can share the List of Firewall Ports required between DC and Exchange server communication?

Answer 1

I'd start with these ones.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/config-firewall-for-ad-domains-and-trusts#windows-server-2008-and-later-versions

and more are listed here.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/service-overview-and-network-port-requirements

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Just to be clear, all ports must be open between Exch and the DCs to be supported:

https://learn.microsoft.com/en-us/exchange/plan-and-deploy/deployment-ref/network-ports?view=exchserver-2019