Firewall - Windows XP

The following information shows how you can open port 3389 on a Windows installation. However, quite often the Windows Firewall is under control of the anti-virus software or other security-related software. Therefore the following information might not always be applicable.

Preparation

Enable the Windows XP Firewall.

Create Port Rule

When the AADS Terminal Server is running on port 3389:

enable the default "Remote Desktop" as shown in the Windows Firewall:

Check "Remote Desktop". The selected "Remote Desktop" is equivalent to opening TCP Port 3389 in the Windows XP Firewall.

If you have changed the default RDP port of your AADS Terminal Server to something else, be sure to define the same TCP port in the Windows Firewall.
For example, if the default RDP port of your AADServer is 12345, proceed as follows:

The RDP port number of the AADS Terminal Server is set to 12345. This setting must also be done in the Windows Firewall:

• Be sure to un-check "Remote Desktop" and "Remote Assistance". In this example we will be using RDP port 12345. Therefore the default 3389 aka "Remote Desktop" is not required and should be disabled in the Windows Firewall.
• Click on "Add Port..." and add a port with the number 12345.

The result will be:

Change Port Rule

If you have changed the default RDP port of your AADS Terminal Server to something else, be sure to define the same TCP port in the Windows Firewall.
For example, if the default RDP port of your AADServer is 54321, proceed as follows:

The RDP port number of the AADS Terminal Server is now set to 54321. This setting must also be done in the Windows Firewall:

• Be sure to un-check "Remote Desktop" and "Remote Assistance". We will be using RDP port 54321. Therefore the default 3389 aka "Remote Desktop" is not required and should be disabled in the Windows Firewall.
• Click on "Edit..." and change the number to 54321.

AADServer in a Farm

When this Server is used in an AADS Farm, default it will be using port 3390 for the Farm-communication. The protocol is UDP:

Create a port in the Windows Firewall for UDP on port 3390 by clicking on "Add Port":

The result will be:

Additional Firewall Security for the Farm

In the example above, the broadcast address for the Farm is 192.168.200.255. This implies that the Farm is running on the network-scope/range 192.168.200.0/255.255.255.0

It is possible to limit the Firewall rule "AADS-Farm-UDP" to the the network-scope/range 192.168.200.0/255.255.255.0, which is more secure:

• Edit the rule "AADS-Farm-UDP" by selecting "AADS-Farm-UDP" and clicking on "Edit"
• Click on "Change Scope"
• Enter the "Custom List"