Warning - Windows Firewall may be blocking RES Relay traffic - Windows
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is the latest version.

1Warning - Windows Firewall may be blocking RES Relay traffic - Windows6/17/2016 2:16:27 PM
2Warning - Windows Firewall may be blocking RES Relay traffic - Windows8/11/2016 12:57:33 PM
3Warning - Windows Firewall may be blocking RES Relay traffic - Windows10/3/2016 4:47:30 PM
4Warning - Windows Firewall may be blocking RES Relay traffic - Windows12/7/2016 2:02:22 AM

Description

The listed computers have the Windows Firewall enabled. Windows Firewall is currently configured to block inbound UDP traffic on the port used by BES (BES uses port 52311 by default) as well as inbound ICMP traffic.

Important Note: If the listed computers' firewall settings are being administered through a domain group policy, the results of this action may be overwritten by that policy. The actions below will only affect the local firewall policy, and will not affect any group firewall policy settings that may have been applied by a domain administrator. If your firewall has been configured via a domain group policy, these actions may report back as 'Failed', and the firewall must be disabled or configured through group policy instead.


Property Details

ID22991
TitleWarning - Windows Firewall may be blocking RES Relay traffic - Windows
DomainBESC
CategorySupport
Download Size0
SourceBigFix
Source ID<Unspecified>
Source SeverityImportant
Source Release Date12/5/2016 12:00:00 AM
Added by on 12/7/2016 2:02:22 AM
Last Modified by on 12/7/2016 2:02:22 AM
Counters 1813 Views / 26 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Relevance

Used in 219 fixlets   * Results in a true/false
Show indented relevance
(if exists property "in proxy agent context" then ( not in proxy agent context ) else true )
isWindows (Relevance 1172)
Used in 1112 fixlets and 524 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 20 fixlets and 1 analsis   * Results in a true/false
Show indented relevance
exists service "RESRLS"
Used in 4 fixlets   * Results in a true/false
Show indented relevance
(firewall enabled of current profile of local policy of firewall|false) OR (exists key "HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile" whose (value "EnableFirewall" of it = 1) of registry) OR (exists key "HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile" whose (value "EnableFirewall" of it = 1) of registry) OR (exists key "HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile" whose (value "EnableFirewall" of it = 1) of registry)
Used in 4 fixlets   * Results in a true/false
Show indented relevance
NOT ((inbound connections allowed of current profile of local policy of firewall|false) OR (exist key "HKLM\Software\Policies\Microsoft\WindowsFirewall\FirewallRules" whose ((exists value whose (it as string as lowercase contains "|action=allow|" and it as string as lowercase contains "|active=true|" AND it as string as lowercase contains "|dir=in|" and NOT (it as string as lowercase contains "|protocol=") AND ((it as string as lowercase contains "|profile=" & (if (current profile type of firewall = domain firewall profile type) then "domain|" else if (current profile type of firewall = public firewall profile type) then "public|" else if (current profile type of firewall = private firewall profile type) then "private|" else "INVALID")) OR not (it as string as lowercase contains "|profile")) ) of it)) of native registry))
Used in 4 fixlets   * Results in a true/false
Show indented relevance
not exists (rules of firewall) whose ((set of substrings separated by "," of local ports string of it) contains (Value "Port" of key "HKEY_LOCAL_MACHINE\Software\RES\Workspace Manager\RelayServer" of native registry as string))
Used in 4 fixlets   * Results in a true/false
Show indented relevance
(not exists authorized application whose (enabled of it AND (it ends with "resrls.exe") of (process image file name of it as lowercase)) of current profile of local policy of firewall)

Sharing

Social Media:
Share this page on Yammer

Comments