Cisco ISE - Port 135

[bigbobmcquade]

Hi All

Some advice please,

Cisco ISE Port 135 - Are there any services reliant on it and is it required in Comms matrix if not using PIC in deployment?

Thanks

[Surendra]

It is used by MS-RPC process which is totally required for an ISE PIC deployment since we are talking about passive identity more or less. Most of the communication with the DC happens over this TCP port.

[bigbobmcquade]

Hi Surendra,

Thanks for the quick response.

"Most of the communication with the DC happens over this TCP port"

Do I need to open port 135 on a firewall from the PSNs on a distributed ISE deployment?

Thanks

[Surendra · Accepted solution]

That is right. You can refer to the Port Reference document that @Jason Kunst (jakunst) shared.

[Jason Kunst · Accepted solution]

Please see port reference link as well

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/install_guide/b_ise_InstallationGuide24/b_ise_InstallationGuide24_chapter_0110.html#ID-1420-00000004