Exchange 2010 SP1 Network Ports Diagram

Public | DMZ DMZ | Private

Author: M. de Rooij Version: 0.31 Date: April 5th, 2011

SMTP Client
25 /TC P, 5

AD RMS
CP /T 25

Hub Transport Server

P /TC 135 /TCP 445

Exchange Management Console

443/TCP

87 /T

CP

DAG

587,25/TCP 587,25/TCP

25/TCP 50636/TCP

Mailbox Server 3rd Party Mail Server Edge Transport Server IP-PBX 135/TCP Dynamic/TCP 3343/UDP 64327/TCP (1) Dynamic/UDP (3) 389 (TCP,UDP) 88 (TCP, UDP) 53 (TCP,UDP) 5061,5066, 5068/TCP (2) 5060,5065, 5067/TCP 3268 (TCP) 135 (TCP) Hub Transport Server

CP /T 25

13 5/ TC P

25/TCP

135/TCP (5) 135/TCP 53/TCP,UDP 88/TCP,UDP 3268/TCP 389/TCP,UDP 135/TCP 53/TCP,UDP 88/TCP,UDP 3268/TCP 389/TCP,UDP DC, GC, DNS Mailbox Server 389/TCP,UDP 88/TCP,UDP 53/TCP,UDP 389/TCP,UDP 53/TCP,UDP Dynamic/TCP (5) Outlook

OWA Outlook

ActiveSync

Edge Transport Server

UM Server

135/TCP
50 Dy 507 60-5 na 5- 06 mi 50 2/ c/T 77/ TC CP TC P (7 P )

P TC TC ic/ 5/ m 13 yna D

) (4 P P TC TC c/ 43/ i m , 4 CP na CP 5/T Dy 0/T 13 8

3268/TCP

135/TCP

P /TC 443 CP, 0/T 8

Legacy Exchange Server

80/TCP, 443/TCP 110/TCP, 995/TCP 143/TCP, 993/TCP Legacy User (IMAP4,POP3) Client Access Server

80/TCP, 443/TCP 995/TCP 993/TCP Client Access Server

5075-5077/TCP 5061/TCP OCS FE

NOTES: 1) Default 64327, configurable using Set-DatabaseAvailabilityGroup -identity DAG-ID -ReplicationPort <portnumber> 2) UM IP Gateway port configurable using Set-UMIPGateway -Identity UMIPGateway -Port <portnumber/5060> .. 3) Dynamic, range 1024-65535 4) Default 6005-59530, configure RPC port on CAS using HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeRPC\ParametersSystem\TCP/IP Port (REG_DWORD). Configure address book service using HKLM\SYSTEM\CurrentControlSet\services\MSExchangeAB\Parameters\RpcTcpPort (REG_SZ). 5) Legacy Public Folder access. Configure MAPI port on MBX HKLM\SYSTEM\CurrentControlSet\Services\MSExchangeRPC\ParametersSystem\TCP/IP Port (REG_DWORD). Configure MAPI port for legacy clients setting HKLM\SYSTEM\CurrentControlSet\services\MSExchangeIS\ParametersSystem\TCP/IP port (REG_DWORD). 7) Configurable using Set-UMServer -Identity <ServerID> -SipTcpListeningPort <SipPortNumber/5060> -SipTlsListeningPort <SipTlsPortNumber/5061> -SIPAccessService <FQDN:PortNumber/5062>

2010-2011 EighTwOne.com