Firewall between Exchange and EVault

[Gogeta]

If we have to put a firewall between the Exchange servers and the EVault servers, is it going to work?  I understand that EVault uses some Internet Explorer settings for communication, but am not sure exactly what.  Is there any specific port, etc..  that used by EVault and should not be blocked by the firewall?

Any suggestion is appreciated.

Gogeta

[JesusWept3 · Accepted solution]

The Administrators guide or the install and config guides should have a list of ports that EV uses.
however between the EV Server and Exchange Server you really need just the same ports that MAPI will use

between end users and the server you will need DCOM ports which by default is a huge range, so you would have to change the ports manually on both the server and the clients or switch to using HTTP or HTTPS calls (80 for http and 443 for https)

I also think it mentions it somewhere when you have EV behind a Windows 2008 firewall and it mentions what ports to unblock from the EV server side

But really, the ports required from EV -> Exchange should be no different than a user opening outlook to connect to exchange

[JesusWept3]

DCOM ports on XP will still need to be configured though as well

[Jens_Sanft]

Appendix A in the "Administrators Guide" lists the ports used by Enterprise Vault.
Additionally there is a document about configuring Enterprise Vault for Restricted DCOM Access:
http://seer.entsupport.symantec.com/docs/323113.htm

In the "Installing and Configuring" manual is a passage to turn of or configure the Windows Firewall in Windows Server 2008 (on page 50 in the PDF for EV8 SP3). Unfortunately the linked article (http://msdn2.microsoft.com/en-us/library/ms809327.aspx) isn’t really up-to-date.

In Windows Server 2008 you don’t have to set registry keys anymore to configure the ports used by RPC/DCOM. This can now be done using the netsh command. A detailed description can be found in the following article:
http://support.microsoft.com/kb/929851/

Additionally, in Windows Server 2008 the Firewall supports Dynamic RPC ports, which will be opened in the Firewall only when requested. A description about creating a Firewall rule with Dynamic RPC can be found here:
http://technet.microsoft.com/en-us/library/cc732839(WS.10).aspx

Regards, Jens