ISE 2.3 integration with active directory

[kareali@cisco.com]

Hi,

  based on cisco document Active Directory Integration with Cisco ISE 2.0, the customer has a concern regarding one of the network ports that must be open for communication. 

port 49152 or greater random ports !! so why ISE needs this port to connect to domain controllers ? 

the document mentioned it is DNS protocol so how DNS works over port 49152 ?

[Rob Ingram]

Hi,

This MS link indicates TCP 49152 is a random port number used by Active Directory for RPC. Perhaps this question should be aimed at Microsoft? The link also mentions how to restrict RPC traffic to a certain port, this may or may not be of any use.

HTH