Authenticate across firewall

[jfk8680]

Hi,

Some of our laptop clients are going to have to authenticate to our domain across a firewall. At the moment only DNS and Citrix ICA traffic is allowed. I have to open additional ports so the clients can authenticate to the domain. After some research I have come up with the following ports that I think should be opened:

TCP 135 : MS-RPC
TCP 1025 & 1026 : AD Login & replication
TCP 389 : LDAP
TCP & UDP 53 : DNS
TCP 445 : SMB , Microsoft-ds
TCP 139 : SMB
UDP 137 & 138 : NetBIOS related
UDP 88 : Kerberos v5

Is the list correct and complete???

Thanks a lot!

Jeffrey

Jeffrey Kusters
MCSA, MCSE, CCNA, CCNP, VCP-310

 

[cajuntank]

Why not just VPN and be done with it? That's a lot of open ports.

 

[DG659]

i have found a lot a problems with Kerberos on udp and more times than not I have to set this to TCP when Authenticating through firewalls even with a VPN.

http://support.microsoft.com/kb/244474