Newbie

[Beldin]

Hello all


I do not have much experience with Checkpoint firewall, but i have been
learning a lot in the last week or so, but i am stumped.


I have been able to create rules for a lot of services but i have not been
able to create one for SQL communications and i am at a lost why i can't.

This is what i want to do. I have a SQL server behind my firewall which
needs to get updates from other SQL servers at another location which is not
part of the same network. How would i create a rule to allow the
communications between the SQL Servers? ( the SQL server authenticates with
the other servers then it pulls any updates that it needs ). I know when the
sql server tries to authenticate to the other sql server it opens another
port to continue the session during the authentication process.

This is what i have tried so far,

Source ( the SQL servers at a different location ), Destination ( SQL Server
behind the firewall ) Service, SQL access
Source ( the SQL servers at a different location ), Destination ( SQL Server
behind the firewall ) Service, Any ( just to try )
Source, Any ( just to try ), Destination ( SQL Server behind the firewall )
Service, SQL access
Source, Any ( just to try ), Destination ( SQL Server behind the firewall )
Service, Any ( just to try )

Any help would ne greatly apprieciated

Thanks!!!!!

 

[DTrix]

Hi Beldin,

Just wondering if the remote SQL server is behind another firewall and if so, is NAT implemented in this solution at either (or both) ends.

Also, have you taken a look at the logs for any dropped connections refering to a rule/port.

-D

 

[Beldin]

Hello


There is a firewall at the other end, however it has been opened for the communication.

I was able to get it to work using the source as my SQLServer and the destination as any and the service as any, but i would like to tighten down some more, i used SQLaccess protocol which is 1433 TCP and UDP but still having some trouble, what other ports do i need to open ?

Thanks for the input

 

[DTrix]

I believe you have to open port 1434 as well.

http://www.normos.org/en/lists/iana/port-numbers-8.html

Hope this helps.

-D

 

[DTrix]

I did some research on the Microsoft site and seems that SQL uses FTP (port 21) to transfer data during replication thru a proxy. Try testing this by adding the ftp service in your rule.

http://www.microsoft.com/technet/sql/intrepl.asp