Action 1 (default)

action uses wow64 redirection false

parameter "portnumber_int"="52315"
parameter "portnumber_hex"="{parameter "portnumber_int" as integer as hexadecimal}"
parameter "valuename"="{parameter "portnumber_hex"}0100"

// While both ipv4 and ipv6 exclusions end up in the same place in the Registry, will use the netsh commands for each
// to protect against systems that may not have both ipv4 and ipv6 enabled

wait netsh int ipv4 add excludedportrange tcp {parameter "portnumber_int"} 1

wait netsh int ipv6 add excludedportrange tcp {parameter "portnumber_int"} 1

// In some cases, have found the exclusion cannot be applied while a process (like BESRootServer) actively has the port locked. In that case, add the reg edit manually
// and flag for required restart

// TCP check - check whether there is an exclusion in registry with a start port below or equal to 52311 and end point above or equal to 52311.
// This exclusion may have just been added by the netsh command above, or netsh may have failed because the port was in use (by BESRootServer or conflicting application)
// If the netsh failed, manually add a new one-port exclusion to registry and flag for 'reboot required'
if {not exists (((hexadecimal integer (first 4 of it), (hexadecimal integer (first 4 of it)) + (hexadecimal integer (it)) of concatenation of characters (6;7;4;5) of it - 1) of names of it) of values whose (it as string = "1200ffff") of keys "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a03-9b1a-11d4-9123-0050047759bc}}\29" of registry) whose (item 0 of it <= (parameter "portnumber_int" as integer) and item 1 of it >= (parameter "portnumber_int" as integer) )}
 // Name of the value that should be applied in the Registry - "cc5b0100" for the default port 52315 and range of 1 port to exclude
 regset "[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{{eb004a03-9b1a-11d4-9123-0050047759bc}\29]" "{parameter "valuename"}"=hex:12,00,ff,ff
 action requires restart "bes_webui_tcp_port_exclusion"
endif