topic Re: Cisco ISE - Port 135 in Network Access Control

Cisco ISE - Port 135

bigbobmcquade — Fri, 12 Jul 2019 09:54:20 GMT

Hi All

Some advice please,

Cisco ISE Port 135 - Are there any services reliant on it and is it required in Comms matrix if not using PIC in deployment?

Thanks

Re: Cisco ISE - Port 135

Surendra — Fri, 12 Jul 2019 10:28:51 GMT

It is used by MS-RPC process which is totally required for an ISE PIC deployment since we are talking about passive identity more or less. Most of the communication with the DC happens over this TCP port.

Re: Cisco ISE - Port 135

bigbobmcquade — Fri, 12 Jul 2019 11:52:28 GMT

Hi Surendra,

Thanks for the quick response.

"Most of the communication with the DC happens over this TCP port"

Do I need to open port 135 on a firewall from the PSNs on a distributed ISE deployment?

Thanks

Re: Cisco ISE - Port 135

Jason Kunst — Fri, 12 Jul 2019 12:09:51 GMT

Please see port reference link as well

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_0110.html#ID-1420-00000004

Re: Cisco ISE - Port 135

Surendra — Fri, 12 Jul 2019 12:25:51 GMT

That is right. You can refer to the Port Reference document that @Jason Kunst (jakunst) shared.