Windows Firewall Setup (Application Server)

Purpose

Under most circumstances, inbound rule(s) must be set up on the application server to allow proper communication between Pentagon2000SQL and other software applications. This setup is required in all cases where: (1) the application server(s) and SQL server(s) are separate physical or virtual machines, and/or (2) the Pentagon2000SQL application is setup to run in a server-client configuration.

Overview

This procedure outlines the steps for creating the required inbound rules on the application server.

Required Modules/Features

• Pentagon 2000 Core

Procedure

1. The following inbound rules should be established on the application server:

1. If the system operates from multiple application servers, either actively or in failover automation, ensure the inbound rules are setup on all application servers.

1. Rule #1 - Allow all TCP communication utilizing port 1433 for Microsoft SQL Server.
2. Rule #2 - Allow all communication from the program sqlserver.exe for Microsoft SQL Server. This executable file is by default located at the following path C:\Program Files\Microsoft SQL Server\MSSQL10_50.*\MSSQL\Binn\ where '*' refers to a server specific designation.
3. Rule #3 - Allow all communication from all instances of the program Pentagon32.exe for Pentagon2000SQL.  These executable files can be found within the 32-bit folder within each instance (i.e. LIVE, VERIFY, DEMO, TEST) of the installation.
4. Rule #4 - Allow all communication from all instances of the program serverservicenet64.exe (all ports).  This executable file can be found within the 64-bit folder within each instance (i.e. LIVE, VERIFY, DEMO, TEST) of the installation.
5. Rule #5 - Allow all TCP communication utilizing all ports used for printing services.

1. print services can be set up to communicate utilizing any available port.  Commonly recommended ports are port 30000 and 3xxxx.

1. Access the Windows Firewall
   1. From the Control Panel, left-click Windows Firewall.
      
      
   2. The Windows Firewall window will appear. Left-click Advanced settings.
      
      
   3. The Windows Firewall with Advanced Security window will appear.
2. Create Inbound Rules
   1. From the Windows Firewall with Advanced Security window, left-click Inbound Rules. The Actions group box will update with options relevant to inbound rules. From the Actions group box left-click New Rule...
      
      
   2. The New Inbound Rule Wizard window will appear.
      
      
   3. The Rule Type step will be selected.
      1. Select Program for Rules 2, 3, and 4.
      2. Select Port for Rules 1 and 5.
      3.  Left-click the Next button.
   4. The Program or Protocols and Ports step will appear.
      1. If Program was selected, the Program step will appear.  Select This program path: and enter (or browse and select) the applicable program.
         
         
      2. If Port was selected, the Protocols and Ports step will appear.
         
         
         1. Select TCP.
         2. Select Specific local ports:
         3. Enter the value of the port (i.e. 1433, 30000) in the field to the right of the Specific local ports: label.
      3. Left-click the Next button.
   5. The Action step will appear, select Allow the connection. Left-click the Next button.
      
      
   6. The Profile step will appear, select when the rule shall apply within your organization. Left-click the Next button.
      
      
   7. On the Name step, enter a Name and Description of the rule.  Left-click the Finish button.
      
      

AEROSPACE     •     DEFENSE     •     ELECTRONICS     •     POWER SYSTEMS     •     METALS•     DEFENSE     •     ELECTRONICS     •     POWER SYSTEMS     •     METALS
		Windows Firewall Setup (Application Server)