Firewall - Windows 7

The following information shows how you can open port 3389 on a Windows installation. However, quite often the Windows Firewall is under control of the anti-virus software or other security-related software. Therefore the following information might not always be applicable.

Preparation

Enable the Windows Firewall.

Click on "Allow a program or feature through Windows Firewall"....

Verify that both "Remote Administration" and "Remote Desktop" are not selected.

Create Port Rule

Click on "Advanced Settings"

Select first "Inboud Rules", followed by clicking on "New Rule...."

Select "Port", and click on the "Next" button.

Enter the RDP portnumber of AADS Terminal Server , and click on the "Next" button.

Select "Allow the connection", and click on the "Next" button.

Select Domain, Private and Public, and click on the "Next" button.

Note: the option "Domain" might only be visible if the AADServer is joined to a Domain, and might not visible in case of a stand-alone AADS Terminal Server.

Enter the name "AADS-RDP", and click on the "Finish" button.

There should now be an "Inbound Rule" with the name "AADS RDP".

Change Port Rule

If you change the RDP portnumber of the AADS Terminal Server, you will also need to change the portnumber in the Windows Vista Firewall.
For example, if the RDP port of your AADServer is 12345, proceed as follows:

The RDP port number of the AADS Terminal Server is set to 12345. This setting must also be done in the Windows Firewall:

Select the rule AADS-RDP, and select "Properties", followed by changing the "Local port" number to 12345.

AADServer in a Farm

When this Server is used in an AADS Farm, default it will be using port 3390 for the Farm-communication. The protocol is UDP:

Select first "Inboud Rules", followed by clicking on "New Rule...."

Select "Port", and click on the "Next" button.

Select UDP and enter 3390, and click on the "Next" button.

Select "Allow the connection", and click on the "Next" button.

Select Domain, Private and Public, and click on the "Next" button.

Enter the name "AADS-FARM-UDP", and click on the "Finish" button.

There should now be an "Inbound Rule" with the name "AADS-FARM-UDP".

Additional Firewall Security for the Farm

In the example above, the broadcast address for the Farm is 192.168.200.255. This implies that the Farm is running on the network-scope/range 192.168.200.0/255.255.255.0

It is possible to limit the Firewall rule "AADS-Farm-UDP" to the the network-scope/range 192.168.200.0/255.255.255.0, which is more secure:

• Select the rule "AADS-FARM-UDP" in the list "Inbound Rules"
• Edit the rule by clicking on "Properties"
• Click on "Scope"
• Enter the "Subnet"