Scan a DMZ network

[neosys]

Hi,

our DMZ is not part of Active Directory for security reasons.
How can I manually run a scan on these servers and add the results to the Web Console ?

Thanks,
Neosys

[neosys]

Boom Schaka !!

- You can save this as a keeper -

Remote WMI test
-----------------------------------------------
Found: Microsoft(R) Windows(R) Server 2003, Web Edition Service Pack 2
\root\cimv2 Remote WMI access test OK

Remote Registry test using WMI
-----------------------------------------------
Found: Microsoft Windows Server 2003 Service Pack 2
\root\default Remote WMI access test OK

[neosys]

REGISTRY configuration is in the
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet registry key (which I created) on the server.

Create a REG_MULTI_SZ called Ports With a value of 2000-3000
Create a REG_SZ called PortsInternetAvailable With a value of Y
Create a REG_SZ called UseInternetPorts With a value of Y

And at the hardware FIREWALL conf :
Permit incoming traffic from all LAN clients to TCP port 135 on your server.
Permit incoming traffic from all LAN clients to the TCP ports range specified above.
These are TCP.

Reboot the server and watch the Lansweeper Web console to see the result.

[Hemoco]

neosys wrote:
REGISTRY configuration is in the
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet registry key (which I created).

Create a REG_MULTI_SZ called Ports With a value of 2000-3000
Create a REG_SZ called PortsInternetAvailable With a value of Y
Create a REG_SZ called UseInternetPorts With a value of Y

And the hardware FIREWALL conf :
Permit incoming traffic from all LAN clients to TCP port 135 on your server.
Permit incoming traffic from all LAN clients to the TCP ports range specified above.

Did you get it to work this way?

[neosys]

I believe my question was simple are you able to answer ?
Merci

[Hemoco]

neosys wrote:
I believe my question was simple are you able to answer ?
Merci

You can't be sure of the port ranges unless you specify them in the registry.

[Hemoco]

This might help : http://msdn.microsoft.com/en-us/library/ms809327.aspx

[neosys]

After monitoring a few scans I can see that the testconnection tool uses the following ports range:
Console IP / 2028 to 2268 -- Destination IP / 135 and 1470

Can I assume that WMI uses this same scope of port in order to achieve the scan ?

[neosys]

Yes dcomcnfg is enabled and I get answered on port 135.
The remaining error is Wmierror Access is denied 0x80070005 (WWWSRV1, 192.168.x.x)

[Hemoco]

Did you check on the computer if the dcom service is running (and the other requirements)