Microsoft office Communicator 2007 TCP UDP ports remote users

[s-santhosh]

We have a Cisco secure VPN site to site tunnel between the 2 locations.

Which ports are need to open on tunnel so that users can successfully use OCS over the site to site VPN tunnel.

All the users are havning the main brach AD account.

Using Wireshark captured the packets, found only port TCP 5060, after allowing this port over tunnel I can see the authentication window.

The user authentication fails. Already port 3389, 80, 443 are allowed

The main requirement is to only have the Chat, Group Chat and file transfer. Not require A\V traffic.

OCS is using TCP. no TLS is configured.

Any idea what are all the other ports require to end up with successful authentication.

[mirober2]

Hello,

If you're unsure of what ports the ASA is blocking, I would recommend enabling syslogs and checking the logs for denied packets when a connection fails. The logs will include the port numbers that are being used:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/monitor_syslog.html

Otherwise, you should reference the Office Communicator documentation for more details on the protocol. Most common applications will include a list of ports that need to be opened on a firewall for their use.

-Mike