Ports Used for Outlook Clients to conect Exchange 2010 DAG and Cas Array
Hi there! I'm just looking for some KB knowledge or some thing like that wich let me know all ports used on comunication when clients connect through outlook to Exchange 2010 Cas Array, from Internal and External network. That's because networking guys need to allow specific ports on firewall so them ask me for that to configure firewall exception on VLANs wich servers and clients reside Thanks guys!! MCITP MCTS
June 17th, 2011 2:35am

Based on my knowledge, you will need to open port 6001 for internal outlook access to RPC Client Access As for External it's via port 443. Check out Henrik Walther's article out. http://www.msexchange.org/articles_tutorials/exchange-server-2007/planning-architecture/uncovering-new-rpc-client-access-service-exchange-2010-part1.html
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2011 3:51am

Here's an overview and the procedures for configuring static port mappings: Configuring Static RPC Ports on an Exchange 2010 Client Access Server http://social.technet.microsoft.com/wiki/contents/articles/configuring-static-rpc-ports-on-an-exchange-2010-client-access-server.aspxMCTS: Messaging | MCSE: S+M
June 18th, 2011 6:57am

Hi, Different Exchange Server need different port for communication each other or with AD. The following link provide all the ports for each server. http://technet.microsoft.com/en-us/library/bb331973.aspx Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 20th, 2011 9:31am

Thanks for yours Replies! As sumary we have the follow From Exchang server to outlook client: * TCP End Point Mapper (TCP/135) * Dynamic RPC port range (6005-59530) From Outlook to Exchange server: * 389/TCP/UDP (LDAP), 3268/TCP (LDAP GC), 88/TCP/UDP (Kerberos), 53/TCP/UDP (DNS), 135/TCP (RPC netlogon) * 80/TCP, 443/TCP (SSL) Thanks For your Help If I'm Missing some thing please let me know. MCITP MCTS
June 20th, 2011 7:48pm

Yes, but for your Outlook to Exchange RPC it would be recommended to limit the port, so its not that huge range, see the link Jon posted above for how to do this.Stew
Free Windows Admin Tool Kit Click here and download it now
June 21st, 2011 7:06am

From Exchange server to outlook client: * TCP End Point Mapper (TCP/135) * Dynamic RPC port range (6005-59530) From Outlook to Exchange server: * 389/TCP/UDP (LDAP), 3268/TCP (LDAP GC), 88/TCP/UDP (Kerberos), 53/TCP/UDP (DNS), 135/TCP (RPC netlogon) * 80/TCP, 443/TCP (SSL) You go that a bit wrong. The Exchange servers will not use the RPC End Point Mapper (tcp/135). The RPC CA Service will by default answer on the dynamic port range 6005-59530. But that's what you have to prevent when you channel the traffic through a firewall (or a load balancer). From Outlook to Exchange: * RPC Client Access Service to CAS Array: Henrik suggests to map this to the static port 59532 * Address Book Service to CAS Array: Henrik suggests to map this to the static port 59533 * RPC Client Access Service to Exchange Mailbox servers hosting public folders: Henrik suggests to map this to the static port 59532 In addition you need to open for the RPC Endpoint Mapper from the Outlook clients (tcp/135) and for access to Autodiscover, Availability, OAB (tcp/443). All traffic is initialized from the Outlook client. It works like this: First a request i sent to the RPC Endpoint mapper (tcp/135). Tell me on which ports we are going to communicate for Mailbox access (answer without static port mapping, anything from 6006 to 59530, with the mapping: 59532). Tell me on which ports we are going to communicate for GC access (answer without static port mapping, anything from 6006 to 59530, with the mapping: 59533). And so on. So basically, there are only five ports that needs to be opened. Without public folders, there are four. These are the ports to Exchange. LDAP, Kerberos and DNS are not involved here.MCTS: Messaging | MCSE: S+M
June 21st, 2011 12:05pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics