topic Re: Application Group for DC to DC communication in General Topics

Application Group for DC to DC communication

jhickey — Tue, 13 Dec 2011 15:02:31 GMT

I have 2 domain controllers across 2 dmz's and i need them to talk. I have a list of ports I want to open but I want to keep it neat and create a application group. I dont see an easy way to search applications by ports.

Does anyone have a list of PA applications by name that is required for dc to dc communication ? This is not client to dc communication.

Thanks,

Justin

Re: Application Group for DC to DC communication

jhickey — Tue, 13 Dec 2011 15:04:26 GMT

or maybe its as easy as the active-directory application I just found ?

Re: Application Group for DC to DC communication

arnaud_b — Tue, 13 Dec 2011 15:52:18 GMT

Hi,

The best way is to specifiy a rule for the 2 DC with any restrictions applications. After one or two days, you create a specific report for this rule and you can see the application used between the 2 DC.

What are the services between the 2 DC? (replication, dns, exchange, AD)

Regards,

Arnaud

Re: Application Group for DC to DC communication

Ketchup — Wed, 27 Feb 2013 12:55:02 GMT

The following Applications are required for AD-Communication:

active-directory
kerberos
ldap
ms-ds-smb
ms-netlogon
netbios-ss
netbios-dg
netbios-ns
msrpc
ssl
ntp
dns
ms-kms

Regards,

Heinz