Firewall Rules - OfficeShield Client

• Allow incoming TCP/IP WMI communications over any port via the C:\Windows\system32\wbem\unsecapp.exe program.
• Allow incoming and outgoing TCP/IP WMI communications over any port via the C:\Windows\system32\svchost.exe program, (WINMGMT service).
• Allow incoming TCP/IP communications over port 135 via the C:\Windows\system32\svchost.exe program, (RPCSS service).
• Enable File and Printer Sharing via TCP/IP ports 139 & 445 and UDP ports 137 & 138
• Allow incoming TCP/IP communications over any port via the C:\Windows\System32\kwcaptur.exe program.
• Allow inbound and outbound communications via the ICMP (ping) protocol.
• Allow all outgoing TCP/IP communications for KWMain.exe (Vista/Win 7) or winlogon.exe (XP only) on port 80 (HTTP).
• Allow all incoming and outgoing UDP communications for KWMain.exe (Vista/Win 7) or winlogon.exe (XP only) on port 53 (DNS).
• Allow all incoming TCP/IP communications on port 4566.
• Allow all outgoing TCP/IP communications on port 25 (SMTP).
• Allow all UDP communications on port 123.

OfficeShield Client Installation Pre-Requisites

To allow OfficeShield’s Control Panel to see and manage all of the computers on the network it may be necessary to add exceptions to your personal firewall software.  OfficeShield has been tested with many of the most popular Internet security software packages. Based on this testing we have outlined the firewall rules / exceptions that must be configured in each of the Internet security packages listed below.

Be sure to follow the instructions outlined below associated with your Internet security package on every PC in your network.

If your firewall/Internet security package is not on our list you can manually implement the firewall rules listed on the left hand side of this page or contact support and request that they test with your package.

Keep in mind that depending how secure or rigid your firewall is some of the rules may not be necessary.