Remote Assistance and High Ports

[Guest]

So I have read a few articles on the web discussing Remote Assitance and high
ports. However, most of them relate to using Remote Assistance though
Windows Messanger. I am wondering if anyone could please provide more
insight to what I am seeing?

My company has 5 remote sites; between the main site and the remote sites is
a firewall. We have bidirectionally opened ports 3389 and 135 TCP. We have
also made application and port exceptions to Windows Firewall through Group
Policy. However, when trying to connect to computers at a remote site
through "Offer Remote Assistance" we are unable to. Office Remote Assistance
works within each site, but not across the WAN.

To troubleshoot further, we put a filter on the firewall and found that the
connections were getting blocked because the novice's machine was trying to
reply back on a random high port 91024-65535). Is there a way to stop this
behavior or force the machine to use only ports 3389 and 135?

All machines are running Windows XP and are joined to a domain.

Thanks,
Joe

 

[Robert L [MVP - Networking]]

I am not sure you can do that. However, if you setup VPN to connect each other, you should be able to use Remote Assistance as the same as the LAN.

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
So I have read a few articles on the web discussing Remote Assitance and high
ports. However, most of them relate to using Remote Assistance though
Windows Messanger. I am wondering if anyone could please provide more
insight to what I am seeing?

My company has 5 remote sites; between the main site and the remote sites is
a firewall. We have bidirectionally opened ports 3389 and 135 TCP. We have
also made application and port exceptions to Windows Firewall through Group
Policy. However, when trying to connect to computers at a remote site
through "Offer Remote Assistance" we are unable to. Office Remote Assistance
works within each site, but not across the WAN.

To troubleshoot further, we put a filter on the firewall and found that the
connections were getting blocked because the novice's machine was trying to
reply back on a random high port 91024-65535). Is there a way to stop this
behavior or force the machine to use only ports 3389 and 135?

All machines are running Windows XP and are joined to a domain.

Thanks,
Joe