Novell ZENWORKS NETWORK ACCESS CONTROL 5.0 - 09-22-2008 User Manual page 455

Port Parties
88 (TCP) ES to DC/DHCP
server
135-159 (TCP)
135-159 (UDP)
389 (TCP)
1025 (TCP)
1026 (TCP
3268 (TCP)
88 (TCP) MS/ES to DC/
DHCP server
135-159 (TCP)
135-159 (UDP)
389 (TCP)
1025 (TCP)
1026 (TCP)
3268 (TCP)
Ports used for accessible services and endpoints:
Description
DHCP Server and Domain
Controller behind Novell
ZENworks Network Access
Control:
In DHCP mode, when your
DHCP server and Domain
Controller are behind Novell
ZENworks Network Access
Control, you must specify ports
88, 135 to 159, 389, 1025,
1026, and 3268 as part of the
address. If you do not specify a
DHCP address, users are
blocked. If you specify only the
IP address with no port,
endpoints are not quarantined,
even for failed tests.
DHCP Server and Domain
Controller NOT behind Novell
ZENworks Network Access
Control:
In DHCP mode, if your domain
controller is not situated behind
Novell ZENworks Network
Access Control, you must
configure your router to allow
routes from the quarantine area
to your domain controller on
ports 88, 135-159, 389, 1025,
1026, and 3268.
Ports used in Novell ZENworks Network Access Control 455
Comments
Configure in the Novell
ZENworks Network Access
Control user interface:
Home window
>>System configuration
>>Accessible services
Configure on the router between
Domain Controller and
Quarantine Area