Firewall Port Configuration | Surf Control v5.5 instruction

INSTALLATION DECISIONS

Firewall Port Configuration

2

FIREWALL PORT CONFIGURATION

Web Filter for ISA requires you to edit your system policy to allow Web Filter to communicate across certain network ports. Opening up these ports at the firewall will enable you to use all of the available Web Filter services. For instructions on setting up ISA policy rules for Web Filter services, go to the section on "Firewall Policy Rules" on page 65. The table below describes which ports need to be configured at the firewall for each Web Filter service you want to use:

Table 2-1 Web Filter communication ports

Web Filter Service	Port
Corporate Network Detection Service	51118

SMTP E-mail Notifications	25

EUM Login Agent	61695

EUM Login Agent for Netware	61696

Group enumeration in Active Directory (LDAPS)	636

Group enumeration in Active Directory and Netware (LDAP)	389

Live Updates	Allow outbound access to *.surfcontrol.com

Real-Time Monitor	5000

Remote Administration Client (UDP)	1024 - 65535

SurfControl Report Central	Allow inbound access to 8888 and/or 8443

SQL Server (Remote installations only)	Allow inbound and outbound access to 1433 -1434

User Name Resolution (NetBIOS)	139

Workstation name resolution	53

Workstation name resolution (WINS)	42

SurfControl Web Filter for ISA v5.5

Starter Guide 11

Image 16

Surf Control v5.5 manual Firewall Port Configuration, Web Filter communication ports

Contents

SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter ISA Server Microsoft ISA Server EditionHOW WEB Filter and ISA Server Interact System Requirements Hardware Requirements General System Requirements SQL Server Licensing System Requirements Installation Decisions User Name Resolution IntroductionNetwork Considerations Database Options Deployment Recommendations Network ConsiderationsDMZ Recommendations Network Considerations Firewall Port Configuration Web Filter communication ports ISA Server ISA Server AuthenticationISA Server 2004/2006 User Name Resolution EUM Methods of Installing EUM EUM Agent on Domain ControllersEUM on Windows 2000 and 2003 domain controllers EUM on Windows NT domain controllers Before installation Ignoring Users in NetWare EUM NetwareeumLogging Levels EUM Login Agent Installing the Login Agent on NT DomainsInstalling the Login Agent on Windows 2000 Login Agent Location EumLogin.ini file Below is a copy of the supplied .ini file How to configure the file EumLogin.ini file sections Configuring a logon and logoff script Add an Exception to the Windows Firewall Database Platforms Database ConsiderationsSQL Server Express SQL Server SQL Server minimum requirements on Web Filter server Database Authentication Reasons to Install SQL Server on a Dedicated ServerWindows Authentication SQL Authentication Other Considerations Internet Threat DatabaseCategorization Options Internet Threat Database Improvement Program Remote Administration Client Mail Notifications Remote Administration Client minimum requirements Privacy Edition Considerations Installing Web Filter Installation Process NetWare client on to the Web Filter server Installing SQL Server Express Optional Installing Surfcontrol WEB Filter Select I accept the terms of the license agreement Installing SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Automatic Database Management screen is displayed Internet Threat Database Update screen is displayedThreat Database Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration Post Installation Tasks ALL InstallationsFirewall Policy Rules for ISA Server 2004 Network Dependent Installing the EUM Agent on Your Domain Controllers User Name Resolution Making changes to the EUM Agent configuration Select Domain Controllers screen is displayed User Name Resolution Installing the EUM Login Agent on Your Network Installing Netwareeum Automatically loading the NetWare EUM Unloading the NetWare EUMAdd Web Filter Servers to NetWare EUM Ignored users in NetWare EUM Install Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client Remote Administration Client and Windows Vista InstallShield Wizard Complete screen is displayed Allow Internet Threat Database Updates Configure IE and the VCAFirewall Policy Rules Allow VCA Spider Functionality Allow the Remote Administration Client Access Configure a Firewall Policy Rule for the VCAFrom Access Rule Destinations, click Add From the Primary Connection Information screen, click New SRC Allow Remote Access to Surfcontrol Report CentralEnter 8888 in the Port Range From field Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback