7.0.8 Insight Remote Support Security White Paper

9
HTTP*
TCP/80
Hosting Device
Monitored Device
HTTPS
TCP/443
Hosting Device
Monitored Device
P4000 CLI
TCP/5989
Hosting Device
Monitored Device
P6000 CV
TCP/2372
Hosting Device
Monitored Device
RIBCL
TCP/443
Hosting Device
Monitored iLO Device
SNMPv1*
UDP/161
Hosting Device
Monitored Device
SNMPv2*
UDP/161
Hosting Device
Monitored Device
SSH
TCP/22
Hosting Device
Monitored Device
Telnet*
TCP/2372
Hosting Device
Monitored Network Device
WBEM
TCP/5989
Hosting Device
Monitored Device
WS-MAN
TCP/443
Hosting Device
Managed Superdome OA
WMI
TCP/135
#
Hosting Device
Monitored Windows Server
Table 1: Device Discovery Services (Non Print Devices)
HPPrintDataManager will discover monitored print devices using the following services
Service
Protocol/Port
Source
Destination
HTTP*
TCP/80
Hosting Device
Monitored Print Device
HTTP*
TCP/8080
Hosting Device
Monitored Print Device
HTTPS
TCP/443
Hosting Device
Monitored Print Device
HTTPS
TCP/8080
Hosting Device
Monitored Print Device
PING*
ICMP
Hosting Device
Monitored Print Device
SNMPv1*
UDP/161
Hosting Device
Monitored Print Device
SNMPv3
UDP/161
Hosting Device
Monitored Print Device
Table 2: HPPrintDataManager discovery services (Print Devices)
* DCOM, HTTP, PING, SNMPv1, SNMPv2, and Telnet are unencrypted protocols.
# WMI is a DCOM Service, to configure your Firewall to support DCOM Services see: http://msdn.microsoft.com/en-
us/library/windows/desktop/aa822854%28v=vs.85%29.aspx To restrict WMI to a specific port see:
http://msdn.microsoft.com/en-us/library/windows/desktop/bb219447%28v=vs.85%29.aspx
Communication Services
The following services are used by HP Insight Remote Support for one or more of the following tasks: Remote Device
Monitoring (Device Discovery and Event Notification); Remote Data Collection; Remote Device Access.
DCOM
The Distributed Component Object Model (DCOM) is a Windows protocol that enables software components to
communicate directly over a network. Previously named "Network OLE”, DCOM is designed for use across
multiple network transports, including Internet protocols such as HTTP and WMI (Windows Management
Instrumentation).
DCOM allows processes to be efficiently distributed to multiple computers so that the client and server
components of an application can be placed in optimal locations on the network. Processing occurs