Firewall ports

techie-v2 · 2011-04-08T05:10:59.000Z

I have added all of the following ports to my firewall exceptions and TCP and UDP and checked that they are active but still can not scan properly. yet if I turn the firewall off scan works fine. What am I missing?

135 (WMI): Used to detect Windows computers.
22 (SSH): Used to detect Unix/Linux computers and some network devices.
16992 (Intel AMT SOAP/HTTP): Used to detect vPro status. This is done by checking for an HTTP response on the port. This is editable in settings.yaml
9100 (Jet Direct): Used to detect printers.
5060 (SIP): Used to detect IP phones.
80 (HTTP): Used to detect servers, VMware, and NAS devices.
- Some routers, hubs, switches, and printers can respond to HTTP. In these cases, Spiceworks will scan the webpage to obtain any helpful information.
161 (SNMP): Used to detect network devices such as printers, switches, etc.
5800 (VNC HTTP): Used to detect if a device supports remote access using VNC.

Also found this and added these - sill no joy

ICMPv4 Inbound/Outbound - for Spiceworks Discovery
TCP Ports 135 and 445 Inbound - for WMI
UDP Port 137 Inbound - for Registry Information
TCP 1024 - 2000 Inbound - Dynamic Ports for WMI

Using the command

“netsh advfirewall firewall set rule group=“windows management instrumentation (wmi)” new enable=yes”

worked but I’d rather know the ports so i can put in in group policy

yasaf · 2011-04-08T07:50:18.000Z

What os?

techie-v2 · 2011-04-08T12:23:07.000Z

Exactly the same on 7 and xp sp3.

techie-v2 · 2011-05-06T03:55:16.000Z

Have found the setting in windows firewall that i needed