Ports Used By Zenworks Components; Section 3.6, "Ports Used By Zenworks Components - Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - SYSTEM PLANNING-DEPLOYMENT-BEST PRACTICES GUIDE 10.3 30-03-2010 System Planning Manual

3.6 Ports Used by ZENworks Components

ZENworks Configuration Management uses a number of ports to communicate, based on specific
functions and features. These ports must be considered when building the design of the
infrastructure because they need to be open on firewalls if services reside behind them.
The following table outlines the ports that are used by ZENworks Configuration Management, and
gives a description of what services use them, and why. This information should be shared early in
the design phase, and should be reviewed by the network services teams.
ZENworks Configuration Management Ports
Table 3-2
Port
HTTP (TCP 80)
Stateful
Primary Server and Satellite devices
HTTPS (TCP 443)
Stateful
Open on the Primary Server
CASA (TCP 2645)
Stateful
Open on the Primary Server
LDAP / LDAPS (TCP 389 / TCP 636)
Stateful
Open on the Directory Server
38 System Planning, Deployment, and Best Practices Guide
Description
Used to transmit content between the Primary Server or
Satellite devices and managed devices.
Primary Server downloads patch license related information
and checksum data over HTTPS (port 443), and the actual
patch content files over HTTP (port 80). ZENworks Patch
Management license information is obtained from the
Lumension* licensing server
the patch content and checksum data is retrieved from an
AKAMAI hosted content distribution network
(novell.cdn.lumension.com). You must ensure that the
firewall rules allow outbound connections to these
addresses because the patch content distribution network is
a large fault tolerant network of cache servers.
Used to transmit configuration metadata between the
Primary Server and managed devices.
Used for Tomcat secure port. It is also used by default to
download system updates from NCC and to download
Product Recognition Update (PRU).
Primary Server downloads patch license related information
and checksum data over HTTPS (port 443), and the actual
patch content files over HTTP (port 80). ZENworks Patch
Management license information is obtained from the
Lumension* licensing server
the patch content and checksum data is retrieved from an
AKAMAI hosted content distribution network
(novell.cdn.lumension.com). You must ensure that the
firewall rules allow outbound connections to these
addresses because the patch content distribution network is
a large fault tolerant network of cache servers.
Used to transmit authentication credentials and tokens
between the Primary Server and managed devices.
Used to transmit directory information between the Primary
Server and Directory Server (Novell eDirectory or Microsoft
Active Directory).
(http://novell.patchlink.com),
(http://novell.patchlink.com),