The following table lists the port usage for common protocols operating on servers running Active Directory in a network.

Table: Network Port Usage for Active Directory Services

Service Protocol Src. port Dest. port Src. addr. Dest. addr. Action

DNS Client

TCP

ANY

53

Host IP

ANY

ALLOW

-

UDP

ANY

53

Host IP

ANY

ALLOW

SNMP Server

TCP

ANY

161

ANY

Host IP

ALLOW

-

UDP

ANY

161

ANY

Host IP

ALLOW

CIFS/SMB Client

TCP

ANY

445

Host IP

ANY

ALLOW

-

UDP

ANY

445

Host IP

ANY

ALLOW

CIFS/SMB Server

TCP

ANY

445

ANY

Host IP

ALLOW

-

UDP

ANY

445

ANY

Host IP

ALLOW

Remote Procedure Call (RPC) Client

TCP

ANY

135

Host IP

ANY

ALLOW

-

UDP

ANY

135

Host IP

ANY

ALLOW

RPC Server

TCP

ANY

135

ANY

Host IP

ALLOW

-

UDP

ANY

135

ANY

Host IP

ALLOW

FRS/AD Replication Ports Out

TCP

ANY

57951

Host IP

ANY

ALLOW

-

TCP

ANY

57952

Host IP

ANY

ALLOW

FRS/AD Replication Ports In

TCP

ANY

57951

ANY

Host IP

ALLOW

-

TCP

ANY

57952

ANY

Host IP

ALLOW

NetBIOS Client

TCP

ANY

137

Host IP

ANY

ALLOW

-

UDP

ANY

137

Host IP

ANY

ALLOW

-

TCP

ANY

139

Host IP

ANY

ALLOW

-

UDP

ANY

138

Host IP

ANY

ALLOW

NetBIOS Server

TCP

ANY

137

ANY

Host IP

ALLOW

-

UDP

ANY

137

ANY

Host IP

ALLOW

-

TCP

ANY

139

ANY

Host IP

ALLOW

-

UDP

ANY

138

ANY

Host IP

ALLOW

NTP Client

TCP

ANY

123

Host IP

ANY

ALLOW

-

UDP

ANY

123

Host IP

ANY

ALLOW

Monitoring Client

ANY

ANY

ANY

Host IP

MOM Server

ALLOW

LDAP Client

TCP

ANY

389

Host IP

ANY

ALLOW

-

UDP

ANY

389

Host IP

ANY

ALLOW

-

TCP

ANY

636

Host IP

ANY

ALLOW

-

UDP

ANY

636

Host IP

ANY

ALLOW

Kerberos Client

TCP

ANY

88

Host IP

ANY

ALLOW

-

UDP

ANY

88

Host IP

ANY

ALLOW

Terminal Services

TCP

ANY

3389

ANY

Host IP

ALLOW

Global Catalog Client

TCP

ANY

3268

Host IP

ANY

ALLOW

-

TCP

ANY

3269

Host IP

ANY

ALLOW

Global Catalog Server

TCP

ANY

3268

ANY

Host IP

ALLOW

-

TCP

ANY

3269

ANY

Host IP

ALLOW

DNS Server

TCP

ANY

53

ANY

Host IP

ALLOW

-

UDP

ANY

53

ANY

Host IP

ALLOW

Kerberos Server

TCP

ANY

88

ANY

Host IP

ALLOW

-

UDP

ANY

88

ANY

Host IP

ALLOW

LDAP Server

TCP

ANY

389

ANY

Host IP

ALLOW

-

UDP

ANY

389

ANY

Host IP

ALLOW

-

TCP

ANY

636

ANY

Host IP

ALLOW

-

UDP

ANY

636

ANY

Host IP

ALLOW

NTP Server

TCP

ANY

123

ANY

Host IP

ALLOW

-

UDP

ANY

123

ANY

Host IP

ALLOW

ICMP

ICMP

ANY

ANY

Host IP

ANY

ALLOW

All Inbound Traffic

ANY

ANY

ANY

ANY

Host IP

BLOCK