Axidian CertiFlow Server

Web applications, HTTP, HTTPS

  • 80 (TCP), incoming and outgoing traffic
  • 443 (TCP), incoming and outgoing traffic
  • 3001/3002 (TCP), incoming and outgoing traffic for Axidian AirCard Enterprise
  • 3003 (TCP), incoming and outgoing traffic for Axidian CertiFlow Agent

Mail notifications, SMTP server

  • 25 (TCP), outgoing traffic
  • 465 (TCP), outgoing traffic
  • 587 (TCP), outgoing traffic

Active Directory, incoming and outgoing traffic

  • 53 (TCP/UDP) – DNS
  • 135 (TCP) – RPC
  • 389 (TCP/UDP) – LDAP
  • 636 (TCP) – LDAPS
  • 3268 (TCP/UDP) – LDAP Global Catalog
  • 3269 (TCP) – LDAP Global Catalog SSL
  • 88 (TCP/UDP) – Kerberos
  • 464 (TCP/UDP) – Kerberos Password Change

Microsoft SQL Server, incoming and outgoing traffic

  • 135 (TCP) – Transact-SQL debugger
  • 1433 (TCP) – SQL Server default instance
  • 1434 (UDP) – SQL Server Browser service
  • 4022 (TCP) – Service Broker

PostgreSQL Server, incoming and outgoing traffic

5432 (TCP/UDP) - PostgreSQL default port 

Microsoft CA, incoming and outgoing traffic

  • 135 (TCP) – RPC
  • 389 (TCP/UDP) – LDAP
  • 636 (TCP) – LDAPS
  • Randomly allocated high DCOM/RPC (TCP) ports:
    • 1024 - 5000 for MS CA based on Windows 2003 and previous versions
    • 49152 - 65535 for MS CA based on Windows 2008 and newer versions

Microsoft CA is implemented using DCOM technology. DCOM applications use random TCP port numbers from upper range by default. It is also possible to set the CA to use an explicitly defined TCP port.

User workstations

DNS

53 (TCP/UDP), outgoing connections

Web applications, HTTP, HTTPS

  • 80 (TCP), incoming and outgoing traffic 
  • 443 (TCP), incoming and outgoing traffic
  • 3001/3002 (TCP), incoming and outgoing traffic for Axidian AirCard Enterprise
  • 3003 (TCP), incoming and outgoing traffic for Axidian CertiFlow Agent

Networking Scheme