Enterprise Console - fixed port

Question

Hello. Sophos Enterprise Console 5.2.1 R2. Does anybody know how to set up fixed port for communication between remote ent.console and the server? Due to the secutity policy we can't allow all the port range. After each server restart the port is changing. Thanx. :48732

QC · Accepted Answer

Hello Inhum, there is no way to fix the port? Can't say - either this isn't asked very often or it's something Sophos would rather not want you to do, otherwise there'd likely be an article. And SEC is not the only DCOM application ... This if you think you have to use a fixed port I can only suggest that you contact Support for a definitive answer. Christian  :48760

jak · Answer

You could try limiting the ports used by DCOM to a sensible range but this would apply to all processes on the computer. http://support.microsoft.com/kb/154596 In addition to that you would need to open port 80 or whatever port you chose during the install for the WCF communication. If you need clients to update and communicate with the server as well then open 8194, 8192 and I'd suggest sharing out the CIDs using HTTP.  One other option you may want to consider it using Remote Desktop Services in 2008R2 and later to in effect publish the EnterpriseConsole.exe.  You can then connect to it via a browser for example. Regards, Jak :48776