WIndows firewall

techie-v2 · 2011-04-12T08:02:16.000Z

I have added all of the following ports to my firewall exceptions as TCP and UDP and checked that they are active but still can not scan properly. yet if I turn the firewall off scan works fine. What am I missing?

135 (WMI): Used to detect Windows computers.
22 (SSH): Used to detect Unix/Linux computers and some network devices.
16992 (Intel AMT SOAP/HTTP): Used to detect vPro status. This is done by checking for an HTTP response on the port. This is editable in settings.yaml
9100 (Jet Direct): Used to detect printers.
5060 (SIP): Used to detect IP phones.
80 (HTTP): Used to detect servers, VMware, and NAS devices.
- Some routers, hubs, switches, and printers can respond to HTTP. In these cases, Spiceworks will scan the webpage to obtain any helpful information.
161 (SNMP): Used to detect network devices such as printers, switches, etc.
5800 (VNC HTTP): Used to detect if a device supports remote access using VNC.

Also found this and added these - sill no joy

ICMPv4 Inbound/Outbound - for Spiceworks Discovery
TCP Ports 135 and 445 Inbound - for WMI
UDP Port 137 Inbound - for Registry Information
TCP 1024 - 2000 Inbound - Dynamic Ports for WMI

Using the command

“netsh advfirewall firewall set rule group=“windows management instrumentation (wmi)” new enable=yes”

worked but I’d rather know the ports so i can put in in group policy

This is both on xp sp3 and win 7 machines

robert-spiceworks · 2011-04-12T12:17:03.000Z

What error are you actually seeing when you try and scan with the firewall enabled?

Can you use wmic from the system Spiceworks is installed on to query the system that you are not able to scan?

This is probably where you want to start.

http://community.spiceworks.com/help/Troubleshooting_WMI

Let me know how things look.

techie-v2 · 2011-04-13T00:14:28.000Z

When i try

wmic /user:username /password:yourpassword /node:remotemachine
 systemenclosure get serialnumber

with the firewall on i get "RPC server is not avaliable but when I try it with teh firewall turned off it get the correct results.

techie-v2 · 2011-04-13T00:55:15.000Z

The device view in spiceworks says

Windows authentication error when attempting to connect to this device"

but the Enviroment summary in the inventory says “Timeout waiting for WMI connection”

and if i disable the firewall it works fine

techie-v2 · 2011-05-06T03:56:38.000Z

Its sorted now, found the setting in windows firewall

ericgarcia6858 · 2012-08-30T08:08:34.000Z

Well? what worked? I am having the same problem. HELP!!!