HP 800 Series, User Manual

Page: 551 / 586

E-1
E
Ports used in NAC 800
The following table provides information about Ports used in NAC 800:
Port Parties Description Comments
Ports used for testing endpoints:
88 (TCP)
89 (TCP) Endpoint to ES When using agent-based testing, the
endpoint must point (using a browser
window) to destination port 88 on the
ES for testing, which is redirected to
destination port 89 (end-user access
screens) on the ES. Not configurable
53 (TCP)
53 (UDP) Endpoint to ES Domain Name Server (DNS). When an
endpoint is quarantined in DHCP mode,
it uses the ES for its name server. Not configurable
3128 (TCP) Endpoint to ES
Any endpoint configured to use an
autoproxy (DHCP endpoint enforcement
mode only), and when using agent-based
testing and static routes, the destination
port is
3128 (squid) on the ES.
Not configurable
137 (UDP)
138 (UDP)
139 (TCP) ES to endpoint These ports are opened by default
when File and Print Sharing is enabled,
but are not used by NAC 800. Configure on the firewall/router
between ES and endpoint
445 (TCP) ES to endpoint This port is first used for NMB lookup
(identify yourself) on Windows
endpoints. If this port is not open, the
endpoint cannot be tested.
Then, this port is used for testing
endpoints with the Agentless method.
NOTE: This port is opened by default
when File and Print Sharing is enabled. Configure on the firewall/router
between ES and endpoint
1500 (TCP) ES to endpoint Ports used for testing endpoints with
the Agent-based method. Configure on the firewall/router
between ES and endpoint
1500 (TCP) ES to endpoint Ports used for testing endpoints with
the ActiveX method. Configure on the firewall/router
between ES and endpoint
Table E-1. Ports in NAC 800