cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
samfu
Engaged Sweeper
Hi,
i have a question regading the used ports.
http://www.lansweeper.com/kb/20/used-TCP-ports.html


1.) Lansweeper uses port 135 on windows client devices for wmi scanning?
2.) Which ports are also necessary for the inventory procedure of windows server systems?
(According to the link above, I can see no further port requirements for windows systems)

Our cutomer told us also, that he see in the firewall log, that lansweeper is scanning port 49159... is there an list (range/description), which ports accessed by lansweeper

thanks & best regards
1 ACCEPTED SOLUTION
Hemoco
Lansweeper Alumni

1) Lansweeper uses WMI which uses DCOM which connects to port 135 on the target machine.
2) Target machine says to Lansweeper, let's use port xxxxxx for WMI traffic.

Allowing access to port 135 only isn't sufficient.

If you follow http://msdn.microsoft.com/en-us/library/bb219447%28VS.85%29.aspx port 135 and port 24158 are needed for WMI to work

Update: Here is a knowledge base article with more information on ports to use with Lansweeper Ports scanned or used by Lansweeper Community Requirements - Lansweeper

View solution in original post

6 REPLIES 6
samfu
Engaged Sweeper
Could anybody help?
samfu
Engaged Sweeper
ok, so if i undertand it correctly, there is no range for the "random" ports...
so the option is to set a fix port for wmi queries ..the option to specify only one wmi traffic port is only necessary if there is trouble with the inventoryn (firewall) or in general?

the described procedure (http://msdn.microsoft.com/en-us/library/bb219447%28v=vs.85%29.aspx) is only to set up on one computer - is there an option in general?

best regards,

Hemoco
Lansweeper Alumni
samfu wrote:
ok, so if i undertand it correctly, there is no range for the "random" ports...
so the option is to set a fix port for wmi queries ..the option to specify only one wmi traffic port is only necessary if there is trouble with the inventoryn (firewall) or in general?

Yes
samfu wrote:

the described procedure (http://msdn.microsoft.com/en-us/library/bb219447%28v=vs.85%29.aspx) is only to set up on one computer - is there an option in general?

You can try to create a custom GPO if you find the correct registry keys.

Another solution to your problem would be to use Lspush, this way you won't need to open any ports on your clients.


Hemoco
Lansweeper Alumni

1) Lansweeper uses WMI which uses DCOM which connects to port 135 on the target machine.
2) Target machine says to Lansweeper, let's use port xxxxxx for WMI traffic.

Allowing access to port 135 only isn't sufficient.

If you follow http://msdn.microsoft.com/en-us/library/bb219447%28VS.85%29.aspx port 135 and port 24158 are needed for WMI to work

Update: Here is a knowledge base article with more information on ports to use with Lansweeper Ports scanned or used by Lansweeper Community Requirements - Lansweeper

samfu
Engaged Sweeper
ok , i do not understand why lansweeper connects via other wmi ports, could you please explain?

so if i`m able to connect via port 135 i`m able to inventory the computer hardware and software? and as a example : the wmi connect to other ports like "49159" is to check if a service is running?
Hemoco
Lansweeper Alumni
Source computers connects to destination computer on port 135 first, afterwards random ports are used by WMI. See: http://msdn.microsoft.com/en-us/library/aa389286%28v=vs.85%29.aspx

You can set up a fixed port by following this: http://msdn.microsoft.com/en-us/library/bb219447%28VS.85%29.aspx