Firewall - Windows Server 2008-R2

The following information shows how you can open port 3389 on a Windows installation. However, quite often the Windows Firewall is under control of the anti-virus software or other security-related software. Therefore the following information might not always be applicable.

Preparation

Verify that the firewall is enabled.

Click on "Allow a program or feature through Windows Firewall"....

Verify that both "Remote Administration" and "Remote Desktop" are not selected.

Create Port Rule

Click on "Advanced Settings".

Select first "Inbound Rules", followed by "New Rule...."

Select "Port", and click on the "Next" button.

Enter the RDP portnumber of AADS Terminal Server, and click on the "Next" button.

Select "Allow the connection", and click on the "Next" button.

Select Domain, Private and Public, and click on the "Next" button.

Note: the option "Domain" might only be visible if the AADServer is joined to a Domain, and might not visible in case of a stand-alone AADS Terminal Server.

There should now be an "Inbound Rule" with the name "AADS RDP".

Change Port Rule

The RDP port number of the AADS Terminal Server is changed to 12345. This setting must also be done in the Windows Firewall:

AADServer in a Farm

When this Server is used in an AADS Farm, default it will be using port 3390 for the Farm-communication. The protocol is UDP:

Select first "Inboud Rules", followed by clicking on "New Rule...."

Select "Port", and click on the "Next" button.

Select UDP and enter 3390, and click on the "Next" button.

Select "Allow the connection", and click on the "Next" button.

Select Domain, Private and Public, and click on the "Next" button.

Enter the name "AADS-FARM-UDP", and click on the "Finish" button.

There should now be an "Inbound Rule" with the name "AADS-FARM-UDP".

Additional Firewall Security for the Farm

In the example above, the broadcast address for the Farm is 192.168.200.255. This implies that the Farm is running on the network-scope/range 192.168.200.0/255.255.255.0

It is possible to limit the Firewall rule "AADS-Farm-UDP" to the the network-scope/range 192.168.200.0/255.255.255.0, which is more secure:

• Select the rule "AADS-FARM-UDP" in the list "Inboud Rules"
• Edit the rule by clicking on "Properties"
• Click on "Scope"
• Select Remote IP Address, These IP Addresses
• Enter the "Subnet"