GPO & Firewall Settings for SBS domain 1

[TechCarnivore]

Hi Gang,
Our antivirus software is not in sync with our Small Business Server and it appears to be the result of our Windows Firewall Settings blocking the port Symantec uses to issue updates.

I need to open port 2967 on our workstations and the easiest thing to do would be to edit the existing firewall GPO (Default Firewall GPO that came preconfigured with SBS) or create one that allows this port to be opened.

Though I'm unsure how to create the exception. Any Suggestions?

 

[ShackDaddy]

Using the Group Policy tool in Server Management, go into the Group Policy Objects container (under your domain name) and create a New policy.

After you've named it, the Group Policy Editor will open. Go into Computer -> Administrative Templates -> Network -> Network Connections -> Windows Firewall -> Standard Profile.

In there you will find an entry titled: "Windows Firewall: Define Port Exceptions." Open that.

Click Enable, and then click Show.

Now you have to add a new exception. Use this as your string:

2967:TCP:localsubnet:enabled:AntiVirus

This will allow inbound traffic on TCP port 2967 to any local computer as long as the traffic originates within the local subnet. The last variable just assigns a description to the port exception.

ShackDaddy
Shackelford Consulting

 

[ShackDaddy]

Oh yeah, and then you need to actually link that new GPO to your domain and make sure that the Scope settings apply it to Authenticated Users.

ShackDaddy
Shackelford Consulting