Jump to content

Recommended Posts

Hi @mihnehtoox

What are the required server communication ports for the final clients in the scan?

Firewall off or ports for mbmc are open (defaults are 18457, 443 and 137)
.NET Framework 3.5
Windows Installer 4.0 or higher
Turn on Network discovery, File sharing and Printer sharing. 

Be aware the Microsoft deprecation of netbios may affect your ability to discover endpoints using the client push install tool!


Do the mbae, mabm, and mbarw client ports update to the network?

External URLs to have open for MBMC
https://data.service.malwarebytes.org
Port 443 outbound
https://data-cdn.mbamupdates.com
Port 443 outbound
https://keystone.mwbsys.com
Port 443 outbound

For the server, also add the keystone address to IE's trusted site list and disable IE Enhanced Security if you still have it enabled.


Are clients' updates searched on the internet or on the server?

You choose this in your policy, whether to have the client reach out to the internet own their own (saving you a ton of bandwidth), or to have the management server host them (useful for machines not typically connected to the external internet).

Edited by djacobson
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.