unity and AD on the different segment of firewall

[MLADEN MILANOVIC]

Hi Guys,

I am going through SRND and I know that putting a Unity on the different firewall segment than AD is not a recomeneded design but my customer ask that from me. Anyway, I put a sniffer and find that AD and Unity communicate through following ports/protocol:

LDAP

TCP 135

TCP 1026

Also I would like to mention that MS Exchange 2000 is colocated on the Unity server.

Did I miss something ?

Does anyone think that I need to open some other ports between this two segment ? Anyway, advices are always welcome :-)).

Have a nice day.

Mladen

[Ginger Dillon]

Hi -

Here's a good Cisco article that we gave to our internal firewall security folks - http://www.cisco.com/en/US/customer/products/sw/voicesw/ps2237/products_white_paper09186a00802077c0.shtml

Have fun :-) - there's some Lotus Notes ones you should be able to ignore since you are using Exchange.

Regards,

Ginger

[MLADEN MILANOVIC]

Thanks Ginger. I'll test it today.

Mladen