Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > DameWare Remote Support & Mini Remote Control > Dameware Centralized Installation Guide > Modify your firewall or router

Modify your firewall or router

Updated: September 12, 2017

To successfully connect to Internet Sessions with users outside of your network, you must modify your externally facing firewall or router to forward TCP requests to the Dameware Internet Proxy. You must also allow ports 6130, 6132, and 6133 to listen for incoming requests.

All firewalls and routers operate differently. Please consult the manufacturers documentation for specifics, and use the information in this topic as a general guide.

When you install the Dameware Internet Proxy, you can install it on a computer with or without a pre-existing web server. See Install the DameWare Internet Proxy with another web server for more information.

Use the Test Connection button in the Configuration Wizard to ensure that outside users can communicate successfully through your firewall or router.

Dameware Internet Proxy installed without a Web Server

When you deploy the Dameware Internet Proxy on a computer without a web server, you or your network administrator must open port 443 on your firewall or router. Create a forwarding rule so that all TCP traffic going to your Internet Session URL is directed to your Dameware Internet Proxy instance. You must also allow ports 80, 6129, 6130, 6132, and 6133 to listen for incoming connections.

If you do not have a security certificate from a certificate authority installed, end users may encounter security warnings if they download an Internet Session agent before joining an Internet Session.

Dameware Internet Proxy installed with a Web Server

If you install the Dameware Internet Proxy on a computer that hosts a web server, port 443 is open. Your network administrator must allow ports 80, 6129, 6130, 6132, and 6133 to listen for incoming connections. See Install the DameWare Internet Proxy with another web server for more information.

Consider the following:

Why must you open the ports?

443 (HTTPS)

The Dameware Internet Proxy uses port 443 (HTTPS) to communicate with Mini Remote Control and Internet Session agents on the end users' computers. The Dameware Internet Proxy also includes a web server, which allows end users to download the Mini Remote Control or Internet Session agent. The port number used can be modified where you configure the Internet Session URL. When you configure the Dameware Internet Proxy using this port, the Configuration Wizard generates a self-signed certificate and installs it. If a certificate exists already, the Configuration Wizard uses that certificate and does not generate a self-signed certificate.

6129 (Dameware Mini Remote Control Port)

Dameware agents listen on this port for incoming remote desktop connections.

6130 (Mobile Gateway Communication Port)

The Mobile Gateway listens to this port to allow communication between the Mobile Client and the agent on the remote computer. You can change this port number in the Configuration Wizard.

6132 (Dameware Central Server and Dameware Internet Proxy Communication Port)

Dameware Central Server and Dameware Internet Proxy listen to this port to allow communication between the Mini Remote Control application and the remote agent. This is specific to Internet Sessions. You can change this port number in the Configuration Wizard or the Administration Console.

6133 (Dameware Service Port)

Dameware uses this port to communicate between Dameware Server components. Dameware components listen to all communications inbound through this port. You can change this port number in the Configuration Wizard.

Common issues when configuring the firewall or router

Other websites may not start

If two or more websites are using port 443, non-Dameware products may not start. Change the port number on the other products, use different IP addresses, or install each product on separate computers.

Communication does not occur

If users cannot access the Internet Session URL or download agents, the ports may not be open. Check that changes were applied correctly and to the correct appliance. The Internet Session URL may also already exist on the computer.

Last modified
13:34, 12 Sep 2017

Tags

Classifications

Public