Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > DameWare Remote Support & Mini Remote Control > Dameware 12.0.4 Installation Guide > Reference material > Modify your firewall or router

Modify your firewall or router

Updated: June 30, 2017

To successfully connect to Internet Sessions with users outside of your network, you must modify your externally facing firewall or router to forward TCP requests to the Dameware Internet Proxy. You must also allow ports 6130, 6132, and 6133 to listen for incoming requests.

All firewalls and routers operate differently. Please consult the manufacturers documentation for specifics, and use the information in this topic as a general guide.

When you install the Dameware Internet Proxy, you can install it on a computer with or without a pre-existing web server. See Install the DameWare Internet Proxy with another web server for more information.

Use the Test Connection button in the Configuration Wizard to ensure that outside users can communicate successfully through your firewall or router.

Dameware Internet Proxy installed without a Web Server

When you deploy the Dameware Internet Proxy on a computer without a web server, you or your network administrator must open port 443 on your firewall or router. Create a forwarding rule so that all TCP traffic going to your Internet Session URL is directed to your Dameware Internet Proxy instance. You must also allow ports 80, 6129, 6130, 6132, and 6133 to listen for incoming connections.

If you do not have a security certificate from a certificate authority installed, end users may encounter security warnings if they download an Internet Session agent before joining an Internet Session.

Dameware Internet Proxy installed with a Web Server

If you install the Dameware Internet Proxy on a computer that already hosts a web server, port 443 is open. Your network administrator must allow ports 80, 6129, 6130, 6132, and 6133 to listen for incoming connections. See Install the DameWare Internet Proxy with another web server for more information.

Consider the following:

  • By design Apache cannot serve multiple sites out of port 443. If you are currently using HTTPS with Apache, you cannot co-locate the Dameware Internet Proxy on the same computer and use the same port number. see Install the DameWare Internet Proxy with another web server for more information.
  • Do not use a URL for your Internet Session URL that is already in use.
  • For the optional ports for specific Dameware features, see Dameware system requirements.

Why must you open the ports?

443 (HTTPS)

The Dameware Internet Proxy uses port 443 (HTTPS) to communicate with Mini Remote Control and Internet Session agents on the end users' computers. The Dameware Internet Proxy also includes a web server, which allows end users to download the Mini Remote Control or Internet Session agent. The port number used can be modified where you configure the Internet Session URL. When you configure the Dameware Internet Proxy using this port, the Configuration Wizard generates a self-signed certificate and installs it. If a certificate exists already, the Configuration Wizard uses that certificate and does not generate a self-signed certificate.

6129 (Dameware Mini Remote Control Port)

Dameware agents listen on this port for incoming remote desktop connections.

6130 (Mobile Gateway Communication Port)

The Mobile Gateway listens to this port to allow communication between the Mobile Client and the agent on the remote computer. You can change this port number in the Configuration Wizard.

6132 (Dameware Central Server and Dameware Internet Proxy Communication Port)

Dameware Central Server and Dameware Internet Proxy listen to this port to allow communication between the Mini Remote Control application and the remote agent. This is specific to Internet Sessions. You can change this port number in the Configuration Wizard or the Administration Console.

6133 (Dameware Service Port)

Dameware uses this port to communicate between Dameware Server components. Dameware components listen to all communications inbound through this port. You can change this port number in the Configuration Wizard.

Common issues when configuring the firewall or router

Other websites may not start

If two or more websites are using port 443, non-Dameware products may not start. Change the port number on the other products, use different IP addresses, or install each product on separate computers.

Communication does not occur

If users cannot access the Internet Session URL or download agents, the ports may not be open. Check that changes were applied correctly and to the correct appliance. The Internet Session URL may also already exist on the computer.

Last modified
09:52, 30 Jun 2017

Tags

Classifications

Public