Answered by:
Ports to open in DMZ to internal network with eservice

Question
-
Hi to all,
does anybody know what are the ports to open in the firewall that goes between the DMZ to internal network in a Eservice deployment? I would like to implement the CRM 4.0 with SQL 2008 and Windows 2008 AD in internal network and Eservice in DMZ. I found the ports for CRM in the planning document, but I'm not sure what are the ports that eservice need.
Thanks in advance!Monday, January 18, 2010 2:49 PM
Answers
-
Hi Kari,
I believe that you only need the main port that crm is listening on. In a typical implementation this is probably port 80 or 5555 -- what ever port is used when you access http://mycrmserver:xxx/myorganization
The eservice accelerator is basicaly a web site that queries crm via standard web serivces.
Alex Fagundes - www.PowerObjects.com- Edited by Alex Fagundes - PowerObjects Monday, January 18, 2010 4:26 PM sp
- Marked as answer by Donna EdwardsMVP Wednesday, January 20, 2010 5:57 PM
Monday, January 18, 2010 4:26 PM -
Hi Kari,
there is a great new article from Microsoft
Security and Authentication in Microsoft Dynamics CRM: Connectivity and Firewall Port Requirements in On-Premise Deployments
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d06e9b99-2f10-43fd-94b4-8014a8dca9ea
Viele Grüße
Michael Sulz
axcentro GmbH
MVP für Microsoft Dynamics CRM- Marked as answer by Donna EdwardsMVP Wednesday, January 20, 2010 5:57 PM
Monday, January 18, 2010 5:46 PM -
Hi Kari,
I spend 6 months building eService in DMZ. You will need provide communication to CRM Server (default 80 or 5555) and SQL server (default 1433).
If you want to send emails from smtp server you will need to open SMTP port (25).
If you will have any questions regarding eService don't hesitate to ask.
My Dynamics CRM Blog: http://bovoweb.blogspot.com- Marked as answer by Donna EdwardsMVP Wednesday, January 20, 2010 5:57 PM
Monday, January 18, 2010 11:00 PM
All replies
-
Hi Kari,
I believe that you only need the main port that crm is listening on. In a typical implementation this is probably port 80 or 5555 -- what ever port is used when you access http://mycrmserver:xxx/myorganization
The eservice accelerator is basicaly a web site that queries crm via standard web serivces.
Alex Fagundes - www.PowerObjects.com- Edited by Alex Fagundes - PowerObjects Monday, January 18, 2010 4:26 PM sp
- Marked as answer by Donna EdwardsMVP Wednesday, January 20, 2010 5:57 PM
Monday, January 18, 2010 4:26 PM -
Hi Kari,
there is a great new article from Microsoft
Security and Authentication in Microsoft Dynamics CRM: Connectivity and Firewall Port Requirements in On-Premise Deployments
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=d06e9b99-2f10-43fd-94b4-8014a8dca9ea
Viele Grüße
Michael Sulz
axcentro GmbH
MVP für Microsoft Dynamics CRM- Marked as answer by Donna EdwardsMVP Wednesday, January 20, 2010 5:57 PM
Monday, January 18, 2010 5:46 PM -
I would also like to add that there is a common misconception that to accomplish what you want to do is that you have to enable IFD mode. This is not correct, IFD mode is just a different type of authentication and if you aren't trying to enable CRM access from inside of Outlook over the Internet you don't have to take this additional step.
Jerry
Jerry http://www.crminnovation.comMonday, January 18, 2010 9:56 PM -
Hi Kari,
I spend 6 months building eService in DMZ. You will need provide communication to CRM Server (default 80 or 5555) and SQL server (default 1433).
If you want to send emails from smtp server you will need to open SMTP port (25).
If you will have any questions regarding eService don't hesitate to ask.
My Dynamics CRM Blog: http://bovoweb.blogspot.com- Marked as answer by Donna EdwardsMVP Wednesday, January 20, 2010 5:57 PM
Monday, January 18, 2010 11:00 PM