Active Roles 8.0.1 LTS - Administration Guide

• The TCP port specified when registering the AD LDS instance with Active Roles

• Port 25 (Default SMTP port) TCP Outbound
• Active Roles uses SMTP port 25 by default. The default port number can be changed in the properties of the Mail Configuration object in the Active Roles console. If Mail Configuration specifies a different port, open that port rather than port 25.

You can set up a firewall between Active Roles client components, such as the Active Roles Console (also known as the MMC Interface), Web Interface, ADSI Provider or Management Shell, and the Active Roles Administration Service.

To access the Active Roles Administration Service with the Active Roles client components through a firewall, you must open port 15172 and all high ports (1024-65535) on port 15172 in the firewall. The client machines randomly select high ports to use for outgoing traffic on port 15172 to access the Active Roles Administration Service.

To give access to the Active Roles Administration Service through a firewall

1. In the firewall, open port 15172 TCP Inbound/Outbound.

   NOTE: For more information about opening ports in your firewall, refer to the operating system's or the network device vendor's documentation.

2. In the firewall, open the high ports (port range 1024-65535) on port 15172.

   NOTE: To check the list of high ports being used on port 15172, in the Active Roles Console of a client machine, use the netstat -an command.

If you want to access the Active Roles Web Interface through a firewall, then you need to open the following ports:

• Port 80 (Default HTTP) TCP Inbound/Outbound
• Port 443 (Default HTTPS) TCP Inbound/Outbound

The Web Interface normally runs over port 80, or over port 443 if SSL is enabled (off by default).