What Ports and Protocol are used for client-server communication by active-scanning?

[Lars_Vopicka]

I need a brief decription of active-scanning communication between Server an client.

- LS Looks up AD-Entry
- LS resolves the host-IP-Adress using DNS.
- LS asks client by Port(s) xxxx using TCP? or UDP? to transmit WMI-DATA
- Client transmitts results on Port(s) xxxx using TCP? or UDP?

The knowledge of these ports AND protocols ist critical to enter our DMZs.
Can you advice?

Lars

[Hemoco · Accepted solution]

1) access from the service to the DC on the LDAP port.
2) access from the service to the dns server.
3) and now the tricky part: WMI uses random ports
http://msdn.microsoft.com/en-us/library/aa389286%28VS.85%29.aspx

Setting up a fixed port for WMI

[Lars_Vopicka]

Setting up a fixed port for WMI

...only Works with Vista and Server 2008.