WMI scanning of machines in remote LAN causes 0x800706BA

[Fossy777]

Hi there,

I have a branch connected to my network using VPN and 3MBit/s. All clients and one server there are domain members and have no local firewall enabled.

Anyway: testing tool sais

DNS test
-----------------------------------------------
Is this the correct remote IP: 192.168.96.12
If not, please check for DNS problems

\root\cimv2 Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

Remote WMI test
-----------------------------------------------
\root\cimv2 Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

Remote Registry test using WMI
-----------------------------------------------
\root\default Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

I have read http://www.lansweeper.com/kb/The-RPC-server-is-unavailable.aspx and done all what is written there, I now even have disabled the Windows firewall completely. If I test connectivity locally there (from server to client) it works.
My firewall guy sais that there are no port blockings between the clients and LanSweeper server any direction (any client to LS server and LS server to any rule). Also DNS resolution cannot be the problem, CO-DC01 really has IP 192.168.96.12. Where is the problem though?

What ports exactly are used by WMI in which direction? Does it use broadcasts?!?

Best regards, Jochen

[Fossy777]

Hi there,

we found the cause of the issue. It is no port filtering but an IPS rule in firewall.

Thank you very much

[Hemoco]

See this link for the wmi ports:
http://www.lansweeper.com/kb/used-TCP-ports.aspx

Do you have a log of dropped packets on the firewall?