Application Group for DC to DC communication

[jhickey]

I have 2 domain controllers across 2 dmz's and i need them to talk. I have a list of ports I want to open but I want to keep it neat and create a application group. I dont see an easy way to search applications by ports.

Does anyone have a list of PA applications by name that is required for dc to dc communication ? This is not client to dc communication.

Thanks,

Justin

[jhickey]

or maybe its as easy as the active-directory application I just found ?

[arnaud_b]

Hi,

The best way is to specifiy a rule for the 2 DC with any restrictions applications. After one or two days, you create a specific report for this rule and you can see the application used between the 2 DC.

What are the services between the 2 DC? (replication, dns, exchange, AD)

Regards,

Arnaud

[Ketchup]

The following Applications are required for AD-Communication:

• active-directory
• kerberos
• ldap
• ms-ds-smb
• ms-netlogon
• netbios-ss
• netbios-dg
• netbios-ns
• msrpc
• ssl
• ntp
• dns
• ms-kms

Regards,

Heinz