SCOM Zombie PSA#12: Zombie Instructions: SCOM 2012 Firewall Exceptions

 

Here are the firewall ports that are required for a full Operations Manager 2012 deployment. If you are not going to use certain parts of the product, done, enable the ports. Since I did not recognize any new or removed ports I believe they are the same as Operations Manager 2007 R2.

Feature	Exception	Port and Protocol	Configured By
Management server	· System Center Management service · System Center Data Access service · Operations Manager Connector Framework · Operations Manager Customer Experience Improvement · Operations Manager Application Error Monitoring	5723/TCP 5724/TCP 51905/TCP 51907/TCP 51906/TCP	Setup Setup Setup Setup Setup
Web console	Operations Manager web console	51908/TCP	Setup
Web console, forms authentication, http	World Wide Web Services, http	80/TCP	Windows Firewall
Web console, forms authentication, https	Secure World Wide Web Service	443/TCP	Windows Firewall
Operational database	· SQL Server database server · If using a named instance, add	1433/TCP 1434/UDP	Windows Firewall Windows Firewall
Operations Manager data warehouse database	· SQL Server database server · If using a named instance add	1433/TCP 1434/UDP	Windows Firewall Windows Firewall
Operations Manager Reporting	SQL Server Reporting Services	80/TCP	Windows Firewall
Agent, manual installation of MOMAgent.msi	System Center Management service	5723/TCP	Windows Firewall
Agent, push installation	· System Center Management Service · File and Print Sharing · Remote Administration	5723/TCP 137/UDP, 138/UDP, 139/TCP, 445/TCP 135/TCP, 445/TCP	Windows Firewall Windows Firewall Windows Firewall
Agent, pending repair	· System Center Management service · File and Print Sharing · Remote Administration	5723/TCP 137/UPD, 138/UPD, 139/TCP, 445/TCP 135/TCP, 445/TCP	Windows Firewall Windows Firewall Windows Firewall
Agent, pending upgrade	· System Center Management service · File and Print Sharing · Remote Administration	5723/TCP 137/UDP, 138/UDP, 139/TCP, 445/TCP 135/TCP, 445/TCP	Windows Firewall Windows Firewall Windows Firewall
Gateway	System Center Management Service	5723/TCP	Setup
Operations Manager Audit Collection Service database	· SQL Server · If using a named instance, add	1433/TCP 1434/UDP	Windows Firewall Windows Firewall
Operations Manager Audit Collection Service Collector	ACS Collector Service	51909/TCP	Windows Firewall

You can open the firewall management console by Start, Run, firewall.cpl

OR

Command Prompt way:

• Using the netsh command:

• Microsoft Windows Server 2008 also have an advanced firewall helper called advfirewall.

  netsh firewall set portopening protocol = TCP port = 1433 name = SQLPort mode = ENABLE scope = SUBNET profile = CURRENT
  

• A similar example using the Windows Firewall for Advanced Security helper:

  netsh advfirewall firewall add rule name = SQLPort dir = in protocol = tcp action = allow localport = 1433 remoteip = localsubnet profile = DOMAIN
  

• This might be easier by creating a script with all the enable these firewall rules if you have multiple servers to run this against. Maybe if I have some time, I will write a script, if not, would love for someone to hook me up with one.