Exchange 2010 SP1 Network Ports Diagram v0.31

Posted on April 5, 2011 by Michel de Rooij

It took a while, but I’ve updated the Exchange 2010 SP1 Network Ports diagram I first published in December. Note that the updated version is based on SP1, which you can find in the way to change the address book service for example.

For this version, I’ve included clients, 3rd party SMTP elements, UM and OCS/Lync components and a small list of how to change ports or fix dynamic port settings.

You can download the diagram here. When you got feedback, use the comments or send me an e-mail. Otherwise, feel free the use it; crediting or a reference is appreciated.

Update: Small correction, 135/TPC RPC endpoint mapper from Outlook to Client Access Server was missing (Thanks Maarten).

Update (13Aug11): The Visio can be downloaded through here.

48 thoughts on “Exchange 2010 SP1 Network Ports Diagram v0.31”

NAWAR on April 5, 2011 at 9:13 PM said:

nice work

LikeLike

Reply ↓
Pingback: Exchange 2010 SP1 Network Ports Diagram v0.3 « MS Tech BLOG
Jonas on April 6, 2011 at 9:30 AM said:

Excellent work – I will definitely have this in my Exchange “toolbox” :). Ideas for version 0.32 could be to add a TMG/UAG…

LikeLike

Reply ↓
Pingback: Exchange 2010 SP1 Network Diagram – Update « Rodrigo Rodrigues .:. www.andersonpatricio.org
Jonathan Santos on April 6, 2011 at 5:10 PM said:

Very Good!!!

LikeLike

Reply ↓
Fahiym Bakhari on April 6, 2011 at 8:36 PM said:

This is very nice. I perform lots of deployments and write several design docs so I will definitely find a place in those docs for this visio. Great stuff and I will make sure I give credit where credit is due (to you). Again, thanks

LikeLike

Reply ↓
Pingback: Exchange 2010 SP1 Network Ports Diagram
Madushka on April 7, 2011 at 2:09 PM said:

Hi,

good work. Its very helpful.

Thank You!!!!!!!!!

LikeLike

Reply ↓
Pingback: Flux Exchange 2010 SP1 « Exchange your Mind
Arman Obosyan on April 10, 2011 at 5:20 PM said:

Good work!, very useful, thanks for update!

Arman.

LikeLike

Reply ↓
Rajkumar on April 11, 2011 at 3:30 PM said:

Thank you for the wonderfull presentation

LikeLike

Reply ↓
Matt on April 11, 2011 at 3:43 PM said:

Nicely formatted mon frere! That looks like it started life as a Visio diagram. Any chance of the Visio for amendments and additions? Yes, I could do it myself from scratch but its a busy week…

LikeLike

Reply ↓
- Kenneth Tucker on April 17, 2011 at 10:19 PM said:
  
  Hi there
  
  Yes, it would be great to get our hands on the visio version so re-producing this great doc!
  
  Any chance we get the Visio file format?
  
  Cheers
  Ken
  
  LikeLike
  
  Reply ↓
San on May 18, 2011 at 10:47 AM said:

Hi Michel,

Excellent work!!, maybe add load balancers in this diagram as well ?
Is it possible to get the Visio file as well …?

Thx

LikeLike

Reply ↓
Scott Robinson on May 18, 2011 at 8:11 PM said:

Again awesome work. I was also wondering if i could get the visio version if you have it available. I will still give credit on the doc, but i would need to update to include load balancing.

Thanks in advance,
Scott

LikeLike

Reply ↓
- mdrooij on May 18, 2011 at 8:17 PM said:
  
  I’m considering it given the many requests.
  
  LikeLike
  
  Reply ↓
  - Ken Tucker on May 30, 2011 at 11:31 AM said:
    
    Hi there,
    
    We can’t sleep without this visio doc 🙂
    
    Please post it for us to leverage this great document.
    
    Thanks
    Ken
    
    LikeLike
    
    Reply ↓
Linda on June 1, 2011 at 4:42 PM said:

Excellent work!!! Will be sure to give credit where it’s due. We’ve been looking for a diagram like this! Kudos.

LikeLike

Reply ↓
Pingback: Visio of Exchange 2010 SP1 Network Ports Diagram v0.31 « EighTwOne (821)
mdrooij on August 10, 2011 at 11:15 PM said:

Per request: The Visio can be downloaded here:

Visio of Exchange 2010 SP1 Network Ports Diagram v0.31

LikeLike

Reply ↓
Turbomcp on August 13, 2011 at 1:35 AM said:

much appreciated
Thanks alot

LikeLike

Reply ↓
Pingback: Exchange Server 2010 SP1′de kullanılan portlar « Bir ve Sıfır
Pingback: Exchange Server 2010 SP1′de Kullanılan Portlar « Uğur Demir
Fabio on November 3, 2011 at 2:55 PM said:

Thank you! Very good work!!

LikeLike

Reply ↓
Pingback: Exchange 2010 SP1 Network Ports Diagram | Serkan Varoğlu
jornlux on December 20, 2011 at 10:03 AM said:

I love you man. Beats the hell out of MS article on the same topic !

LikeLike

Reply ↓
Deivid on December 26, 2011 at 5:10 PM said:

Hi,

Can I publish it into my team blog (http://www.msitpro.com.br)?

Regards,

LikeLike

Reply ↓
- mdrooij on December 26, 2011 at 10:33 PM said:
  
  Sure, with proper credits and link to source.
  
  LikeLike
  
  Reply ↓
Pingback: 2011, a short Retrospective « EighTwOne (821)
Alex Fan on January 23, 2012 at 11:59 PM said:

Very detailed and complete. I deploy load balancing by this document.

LikeLike

Reply ↓
Greg Anderson on April 17, 2012 at 1:55 AM said:

very nice technical document, i think we all appreciate the time and effort involved in creating something as detailed as this.

LikeLike

Reply ↓
Scott Jaworski on April 30, 2012 at 3:57 PM said:

Michel, thanks for putting this together. A few questions.
I do see port TCP/808 for MRS on this diagram.
Also, there are a few “Dynamic/TCP” that do not have reference numbers associated, for instance Dynamic/TCP between the CAS and the Mailbox, and Dynamic/TCP between Mailbox and Mailbox. Are those supposed to be reference (3)?
Do you know if these ports are able to be set to static ports?

Thanks!
Scott Jaworski
jaworskiblog.com

LikeLike

Reply ↓
Pingback: 2012, a short Retrospective | EighTwOne (821)
Pingback: Exchange 2010 SP1 Network Ports Diagram … | Ian Works Here
Clive on August 15, 2013 at 8:11 PM said:

According to your diagram 5 ports need to be open between Exch servers and AD DCs.

Below article talks about opening ports between Exchange servers or Exchange Servers and domain controllers. This article clearly states : Starting with Exchange Server 2007 and current as of Exchange Server 2013, having network devices blocking ports/protocols between Exchange servers within a single organization or between Exchange servers and domain controllers in an organization is not supported. A network device may sit in the communication path between the servers, but a rule allowing “ANY/ANY” port and protocol communication must be in place allowing free communication between Exchange servers as well as between Exchange servers and domain controllers.
http://blogs.technet.com/b/exchange/archive/2013/02/18/exchange-firewalls-and-support-oh-my.aspx

More Information : http://technet.microsoft.com/en-us/library/bb331973%28v=exchg.141%29.aspx

LikeLike

Reply ↓
- Michel de Rooij on December 7, 2014 at 6:15 PM said:
  
  Who said anything about blocking? This is a reference – despite the ANY/ANY rule, network people in general want to know what ports are used.
  
  LikeLike
  
  Reply ↓
Pingback: EighTwOne 2013 Annual Report | EighTwOne (821)
Ernie Ayres on January 22, 2014 at 1:30 PM said:

This is great! It definitely helps me to see the ‘big picture’ more clearly. Thanks for putting the time and effort into this.

LikeLike

Reply ↓
@eodeluga (@eodeluga) on March 6, 2014 at 12:11 PM said:

Thanks for this. This helps a lot. Much simpler than Microsoft’s own documentation as seen here http://technet.microsoft.com/en-us/library/bb331973.aspx

LikeLike

Reply ↓
Pingback: All Exchange 2010 network communications in a diagram | Bhargav's IT Playground
Byron zhao on July 1, 2014 at 8:56 PM said:

wow, this is great. Thank you a lot for your work. This is a much better document than MS.

LikeLike

Reply ↓
Denis Bais on November 28, 2014 at 12:11 PM said:

Hi Michel,
Do you also have plans (or already got one) for Exchange 2013?
Would be very much appreciated!

LikeLike

Reply ↓
- Michel de Rooij on December 7, 2014 at 6:17 PM said:
  
  The general recommendation is now ANY/ANY for supported deployments. I know network people usually want a list nonetheless, but that is still on my nice-to-haves to do list (and not at the top I’m afraid).
  
  LikeLike
  
  Reply ↓
  - Miguel on December 16, 2014 at 4:44 PM said:
    
    I Michel very nice work.
    When you say “The general recommendation is now ANY/ANY for supported deployments” is this is the Microsoft recomendation?
    
    LikeLike
    
    Reply ↓
    - Michel de Rooij on December 16, 2014 at 4:50 PM said:
      
      Supported: Filtering client-Exchange traffic
      Not supported: Filtering DC/GC-Exchange and Exchange/Exchange traffic
      http://blogs.technet.com/b/exchange/archive/2013/02/18/exchange-firewalls-and-support-oh-my.aspx
      
      LikeLike
      
      Reply ↓
Salman Khan on October 17, 2016 at 6:05 AM said:

Great Stuff, very much thanks to you. have you created the similar diagram for Exchange 2013 and 2016 as well ?? Please advise !

LikeLike

Reply ↓
- Michel de Rooij on October 17, 2016 at 11:09 AM said:
  
  No, as Ex2013/2016 requires full-mesh access, mainly port 443.
  
  LikeLike
  
  Reply ↓
Pingback: Exchange Server 2010 SP1'de kullanılan portlar | port135.com