Windows Firewall

Yahoo Archive
1
Sounds like this is a problem with the server-side network cards having
the firewall turned on. This is on by default and unless you turn this
off the server will not allow connections to it. To check:



*ON THE SERVER*



Go to the Properties of the NIC card

Choose Advanced tab

Settings button. You should be able to disable it here - push the OFF
radial button.



Disable and everything should work okay.



I haven't seen any problems from a workstation not being able to connect
with the XP firewall on - just the server NIC firewall. I'm assuming you
don't have ISA installed or other firewall on the internal side?



Thanks,



Jason Claggett

Microsoft Small Business Specialist

MCP #3856159

2W Technologies, LLC

317.578.2393

jason@...

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of erikj999
Sent: Tuesday, June 19, 2007 7:47 PM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Windows Firewall



From what I understand (and I could be wrong), the agent ports are used
between the app server processes and the broker. Since these services
are on the same machine, I don't think the firewall is blocking them.

Client machines talk to the *Broker* process which usesa single port
per instance (production, training, pilot, etc. are each "instances").

You probably just need to open a single firewall port for the broker,
which usually like 8400. Hope this helps.

Erik Johnson
Sr. Director, Product Architectures
Epicor, San Diego

--- In vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ,
"amvarghai" <amvarghai@...> wrote:
>
> Hi, We recently purchased a new server to run Vista/Vantage on. This
> server is running windows 2k3 std. The windows firewall seems to
> block access to Appservers from any work station. Since Vista/Vantage
> uses more than 200 ports, some at random, I was wondering if anyone
> knew of any work around besides turning off the firewall or entering
> the ports one by one.
> thanks,
>





[Non-text portions of this message have been removed]
2
Hi, We recently purchased a new server to run Vista/Vantage on. This
server is running windows 2k3 std. The windows firewall seems to
block access to Appservers from any work station. Since Vista/Vantage
uses more than 200 ports, some at random, I was wondering if anyone
knew of any work around besides turning off the firewall or entering
the ports one by one.
thanks,
3
Can't you assign them via group policy to allow those ports in the
firewall?

On 6/19/07, amvarghai <amvarghai@...> wrote:
>
> Hi, We recently purchased a new server to run Vista/Vantage on. This
> server is running windows 2k3 std. The windows firewall seems to
> block access to Appservers from any work station. Since Vista/Vantage
> uses more than 200 ports, some at random, I was wondering if anyone
> knew of any work around besides turning off the firewall or entering
> the ports one by one.
> thanks,
>
>
>


[Non-text portions of this message have been removed]
4
Are you referring to the XP Firewall on the workstations or the Server
Firewall that comes enabled by default on the network cards on the
server?



If the XP workstation, you can go into the Windows Firewall on the
Control Panel and under the exceptions tab, you can add prowin32.exe to
the list. I think that's all you'll need.



We have many clients out there that run Vista/Vantage with the firewall
client turned on and they have never had an issue with it.



Thanks,



Jason Claggett

Microsoft Small Business Specialist

MCP #3856159

2W Technologies, LLC

317.578.2393

jason@...

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of amvarghai
Sent: Tuesday, June 19, 2007 11:44 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Windows Firewall



Hi, We recently purchased a new server to run Vista/Vantage on. This
server is running windows 2k3 std. The windows firewall seems to
block access to Appservers from any work station. Since Vista/Vantage
uses more than 200 ports, some at random, I was wondering if anyone
knew of any work around besides turning off the firewall or entering
the ports one by one.
thanks,





[Non-text portions of this message have been removed]
5
Our appserver runs on port 8301. This is the only port that the
client is connected to, so this should be the only port (yours is
different) that you need to allow incoming.

--JP

I'm pretty sure you only to to allow incoming to the app server port,
which is static.

--- In vantage@yahoogroups.com, zjumper <zjumper@...> wrote:
>
> Can't you assign them via group policy to allow those ports in the
> firewall?
>
> On 6/19/07, amvarghai <amvarghai@...> wrote:
> >
> > Hi, We recently purchased a new server to run Vista/Vantage on.
This
> > server is running windows 2k3 std. The windows firewall seems to
> > block access to Appservers from any work station. Since
Vista/Vantage
> > uses more than 200 ports, some at random, I was wondering if
anyone
> > knew of any work around besides turning off the firewall or
entering
> > the ports one by one.
> > thanks,
> >
> >
> >
>
>
> [Non-text portions of this message have been removed]
>
6
Hi Jason,
Thanks for your response. I am talking about the server firewall that
comes enabled by default. I talked to the tech at Epicor and she said
I have to open all the ports for all the Appservers. The ports for
the Agent has a range of 2002-2202. She said they are chosen at
random so all of them should be open. Since there is no way to put a
range in for windows firewall I would have to add them one by one.
Or I could just turn off the firewall. I wasn't sure if there are
particular security issues. Sounds like I should just turn it off
since it is sitting behind a dedicated firewall anyways.
Let me know if you agree or not.
thanks,
Amin


--- In vantage@yahoogroups.com, "Jason Claggett" <jason@...> wrote:
>
> Are you referring to the XP Firewall on the workstations or the Server
> Firewall that comes enabled by default on the network cards on the
> server?
>
>
>
> If the XP workstation, you can go into the Windows Firewall on the
> Control Panel and under the exceptions tab, you can add prowin32.exe to
> the list. I think that's all you'll need.
>
>
>
> We have many clients out there that run Vista/Vantage with the firewall
> client turned on and they have never had an issue with it.
>
>
>
> Thanks,
>
>
>
> Jason Claggett
>
> Microsoft Small Business Specialist
>
> MCP #3856159
>
> 2W Technologies, LLC
>
> 317.578.2393
>
> jason@...
>
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of amvarghai
> Sent: Tuesday, June 19, 2007 11:44 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] Windows Firewall
>
>
>
> Hi, We recently purchased a new server to run Vista/Vantage on. This
> server is running windows 2k3 std. The windows firewall seems to
> block access to Appservers from any work station. Since Vista/Vantage
> uses more than 200 ports, some at random, I was wondering if anyone
> knew of any work around besides turning off the firewall or entering
> the ports one by one.
> thanks,
>
>
>
>
>
> [Non-text portions of this message have been removed]
>
7
So you are talking about the firewall on the server NICs, then? If yes,
then most definitely turn those off as these probably will cause issues
with other applications.



Thanks,



Jason Claggett

Microsoft Small Business Specialist

MCP #3856159

2W Technologies, LLC

317.578.2393

jason@...

From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of amvarghai
Sent: Tuesday, June 19, 2007 4:51 PM
To: vantage@yahoogroups.com
Subject: [Vantage] Re: Windows Firewall



Hi Jason,
Thanks for your response. I am talking about the server firewall that
comes enabled by default. I talked to the tech at Epicor and she said
I have to open all the ports for all the Appservers. The ports for
the Agent has a range of 2002-2202. She said they are chosen at
random so all of them should be open. Since there is no way to put a
range in for windows firewall I would have to add them one by one.
Or I could just turn off the firewall. I wasn't sure if there are
particular security issues. Sounds like I should just turn it off
since it is sitting behind a dedicated firewall anyways.
Let me know if you agree or not.
thanks,
Amin

--- In vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ,
"Jason Claggett" <jason@...> wrote:
>
> Are you referring to the XP Firewall on the workstations or the Server
> Firewall that comes enabled by default on the network cards on the
> server?
>
>
>
> If the XP workstation, you can go into the Windows Firewall on the
> Control Panel and under the exceptions tab, you can add prowin32.exe
to
> the list. I think that's all you'll need.
>
>
>
> We have many clients out there that run Vista/Vantage with the
firewall
> client turned on and they have never had an issue with it.
>
>
>
> Thanks,
>
>
>
> Jason Claggett
>
> Microsoft Small Business Specialist
>
> MCP #3856159
>
> 2W Technologies, LLC
>
> 317.578.2393
>
> jason@...
>
> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
[mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ] On
Behalf
> Of amvarghai
> Sent: Tuesday, June 19, 2007 11:44 AM
> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> Subject: [Vantage] Windows Firewall
>
>
>
> Hi, We recently purchased a new server to run Vista/Vantage on. This
> server is running windows 2k3 std. The windows firewall seems to
> block access to Appservers from any work station. Since Vista/Vantage
> uses more than 200 ports, some at random, I was wondering if anyone
> knew of any work around besides turning off the firewall or entering
> the ports one by one.
> thanks,
>
>
>
>
>
> [Non-text portions of this message have been removed]
>





[Non-text portions of this message have been removed]
8
From what I understand (and I could be wrong), the agent ports are used
between the app server processes and the broker. Since these services
are on the same machine, I don't think the firewall is blocking them.

Client machines talk to the *Broker* process which usesa single port
per instance (production, training, pilot, etc. are each "instances").

You probably just need to open a single firewall port for the broker,
which usually like 8400. Hope this helps.

Erik Johnson
Sr. Director, Product Architectures
Epicor, San Diego

--- In vantage@yahoogroups.com, "amvarghai" <amvarghai@...> wrote:
>
> Hi, We recently purchased a new server to run Vista/Vantage on. This
> server is running windows 2k3 std. The windows firewall seems to
> block access to Appservers from any work station. Since Vista/Vantage
> uses more than 200 ports, some at random, I was wondering if anyone
> knew of any work around besides turning off the firewall or entering
> the ports one by one.
> thanks,
>