1

What is the best way to scan machines with the windows firewall enabled? Seems like more than half my machine are returning an error when scanning. Some machine claim not valid permission, or windows firewall as the reason it didn’t scan the system. I am using a domina admin account.

Thanks for any help.

3 Spice ups
2

Turn it off?

or use group policy to open the WMI ports SW needs?

3

GPO is my only really option I guess because I have machines all over the world, but they all use the same AD. What ports does SW need?

4
  • ICMPv4 Inbound and Outbound - This is needed so that Spiceworks can discover the devices on your network; it is more commonly known as the PING command. There are a number of types of ping commands that can be permitted or blocked by various firewalls. Generally, you will want to permit (commands 0, 3 8 and 11). Some firewalls don’t distinguish between these, so you will need to check the settings on your specific firewall. Many firewalls will already be configured for (0,3,8), so you will need to make sure the (command 11 (echo)) is allowed through the firewall.
  • TCP Ports 135 and 445 Inbound - This is needed for Windows Management Instrumentation (WMI) which Spiceworks uses to get detailed information about Windows computers.
  • UDP Port 137 Inbound - This is needed so that Spiceworks can gather information in the Windows Registry.
  • TCP 1024 - 2000 Inbound - Dynamic Ports for Windows Management Instrumentation (WMI).

http://community.spiceworks.com/help/Configuring_AV_Firewall_Domain

5

Try this link: http://community.spiceworks.com/education/projects/Windows_Firewall