PENDING SCCM 1606 DP installation which ports need to be installed

[jack zhang]

Hi:
SCCM 1606 deployment of MP, DP need to open which firewall port
Thank you

 

[Prajwal Desai]

Thanks to Anders Rodland who has documented this very clearly.

Source Link

These firewall ports are required for SCCM to properly manage clients. You need to specify these in your network / firewall to allow the traffic pass, and they must be open on sccm servers internal firewall as well.

Firewall Ports Client Network -> Configuration Manager Roles

• 67 UDP. PXE Distribution Point
• 68 UDP. PXE Distribution Point
• 69 UDP. PXE Distribution Point
• 80 TCP. Distribution Point, Fallback Status Point, Management point,
• 443 TCP. Distribution Point, Management point (secure)
• 4011 UDP. PXE Distribution Point
• 8530 TCP. Software Update Point.
• 8531 TCP. Software Update Point (secure).
• 10123 TCP. Management Point.

Firewall Ports Configuration Manager Roles -> Client Network

• 9 UDP. Site Server, required by Wake On Lan.

Optional SCCM Firewall Ports, nice to have.
These ports are optional and not required for Configuration Manager to manage clients. I still recommend to open them as they make the daily life of the SCCM administrator much easier.

Firewall Ports Client Network -> Configuration Manager Roles

• 445 TCP. Windows File Share. Required if you use ccmsetup /source: to specify client source.

Firewall Ports Configuration Manager Console -> Client Network

• 135 TCP. Windows Management Instrumentation
• 445 TCP. Windows File Share. This together with Right Click Tools makes it very easy for you to connect to client computers local hard drive when you troubleshoot a client.
• 2701 TCP. Enable remote control from Configuration Manager Console.
• 3389 TCP. Enable Remote Assistance and Remote Desktop.
• ICMP Echo Request.