Jump to content
Sign in to follow this  
mihnehtoox

Firewall Ports

Recommended Posts

What are the required server communication ports for the final clients in the scan?

Do the mbae, mabm, and mbarw client ports update to the network?

Are clients' updates searched on the internet or on the server?

Share this post


Link to post
Share on other sites

Hi @mihnehtoox

What are the required server communication ports for the final clients in the scan?

Firewall off or ports for mbmc are open (defaults are 18457, 443 and 137)
.NET Framework 3.5
Windows Installer 4.0 or higher
Turn on Network discovery, File sharing and Printer sharing. 

Be aware the Microsoft deprecation of netbios may affect your ability to discover endpoints using the client push install tool!


Do the mbae, mabm, and mbarw client ports update to the network?

External URLs to have open for MBMC
https://data.service.malwarebytes.org
Port 443 outbound
https://data-cdn.mbamupdates.com
Port 443 outbound
https://keystone.mwbsys.com
Port 443 outbound

For the server, also add the keystone address to IE's trusted site list and disable IE Enhanced Security if you still have it enabled.


Are clients' updates searched on the internet or on the server?

You choose this in your policy, whether to have the client reach out to the internet own their own (saving you a ton of bandwidth), or to have the management server host them (useful for machines not typically connected to the external internet).

Edited by djacobson

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.