topic Hi,You can use DCERPC in Network Security

Active Directory Behind ASA Firewalls & RPC Traffic

avilt — Tue, 12 Mar 2019 05:01:43 GMT

As per the following MS article, we need to allow TCP/UDP dynamic ports 49152 through 65535 for the Windows 2008 R2 active directory to work if the clients/domain controllers are behind the firewall.

http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx

Can we minimize this ports by using the ASA application inspection features?

Hi,You can use DCERPC

Vibhor Amrodia — Thu, 06 Nov 2014 10:06:51 GMT

Hi,

You can use DCERPC inspection on the ASA device.

Check these URL links and i think they should help you with your query:-

https://supportforums.cisco.com/document/67706/dcerpc-inspection-asapixfwsm

http://www.experts-exchange.com/Security/Software_Firewalls/Cisco_PIX_Firewall/Q_28128906.html

Thanks and Regards,

Vibhor Amrodia

I am unable to view

avilt — Fri, 07 Nov 2014 10:24:31 GMT

I am unable to view expertexchange. With DCE/RPC inspection on ASA, can I do away with dynamic port range?