DX Unified Infrastructure Management

  • 1.  Ports required for discovery and robot deployment

    Posted Sep 07, 2018 11:23 AM

    We implemented firewall rules when deploying 8.1 to allow us to discover and deploy robots behind firewalls.  I'm being asked to justify the SMB related ports specifically, but I can't seem to find any documentation listing those ports as a requirement.

     

    These would be TCP/139, TCP/445, UDP/138 etc....

     

    Does anyone know of an article out there that lists required ports for discovery and robot deployment?  Even 9.0 articles are fine.

     

    Thanks,

     

    Larry



  • 2.  Re: Ports required for discovery and robot deployment

    Broadcom Employee
    Posted Sep 07, 2018 11:35 AM


  • 3.  Re: Ports required for discovery and robot deployment

    Broadcom Employee
    Posted Sep 07, 2018 11:36 AM

    In particular see

     

    Installations that enable discovery across a firewall without a hub and tunnel require the port for the appropriate protocol to be open in the discovery_agent probe.

     

    Discovery_agent

    DNS - port 53

    NetBIOS - port 137

    SSH - port 22

    SNMP - port 161; configurable

    WMI - port 135 and others

    Outbound

    Allow outbound on ports for the protocol

    Discovery_agent makes calls, as a client, to the services hosted on target machines.

     



  • 4.  Re: Ports required for discovery and robot deployment

    Broadcom Employee
    Posted Sep 07, 2018 11:41 AM

    The port reference misses off the ADE requirement for SMB traffic to deploy the robot binary… I don't think it is documented anywhere.

    Richard_Little  could we raise an update for the docs ?

    cheers



  • 5.  Re: Ports required for discovery and robot deployment

    Broadcom Employee
    Posted Sep 07, 2018 11:54 AM

    RowanCollis that is easily done. Anyone can place a comment on the docops page. This goes straight to the docops team who work with dev and get the page updated. It really is the fastest way to get the docs updated. I have added a comment to the page requesting the SMB data be added to the ADE section as it currently only docs port 22 for SSH

     

    Regards

    Rich



  • 6.  Re: Ports required for discovery and robot deployment

    Broadcom Employee
    Posted Sep 07, 2018 11:55 AM

    Thanks Richard 



  • 7.  Re: Ports required for discovery and robot deployment

    Posted Sep 07, 2018 01:02 PM

    Thanks Rowan and Richard.  I could only find information on the discovery agent myself.