Configuring the Window s Firewall. For Windows Server 2008 and 2012

Transcription

1 2014 Configuring the Window s Firewall For Windows Server 2008 and 2012

2 Summary If firewall software is used to protect the server, it must be configured to allow incoming connections for the Profitstar Server service. This document contains instructions for configuring the Windows Firewall, in Windows Server 2008 and Windows Server 2012, to satisfy and manage client requests for data in the database used by the 2014 versions of PROFITstar, PROFITability, Profitstar Suite, and PROFITstar Portfolio. Note: SQL Server 2012 R2 screen images are used in this document. Contents How to Allow Communication through Windows Firewall on page 3 Appendix A Firewall Exclusions for SQL Server 2012 R2 on page 7 Appendix B Related Links on page 12 2 Revised 02/03/15

3 How to Allow Communication through Windows Firewall 1. From Control Panel > System and Security, find Windows Firewall and click Allow an app or feature through Windows Firewall. 2. From the Allowed apps screen, click Allow another app. 3 Revised 02/03/15

4 3. Click Browse, in the Add an app dialog box. 4. Browse to the Profitstar.Service.exe file. 4 Revised 02/03/15

5 The default location for the file is: C:\Program Files\Profitstar Server 2014\Profitstar.Service.exe Note: If the programs were installed elsewhere, browse to that location. Click Open to select the file. 5. With the program now displayed in the Add an app dialog box, click Add to return to Allowed apps. 5 Revised 02/03/15

6 6. When the Allowed apps screen is displayed, the last program added will be highlighted in the Allowed apps and features list. Verify that all of the check boxes are selected Name, Domain, Private, and Public. 7. After the PROFITstar Service has been selected and added to the Allowed apps and features list, click OK to return to the Windows Firewall screen, where you can exit the Control Panel. 8. When these changes are made, Windows Firewall, for Windows Server 2008 or Windows Server 2012, will not prevent the Profitstar Service from accessing the data used by PROFITstar programs. Note: Windows Server 2012 may require adding access for TCP ports and through the Windows Firewall. 6 Revised 02/03/15

7 Appendix A Firewall Exclusions for SQL Server 2012 R2 When the Profitstar Server and the SQL Server 2012 R2 are run on different machines, and the SQL Server is configured with named instances, it is necessary to add exclusions in the Windows Firewall on the SQL server since the named instances now use dynamic ports. To create these Windows Firewall exclusions (using program rules, not port rules) follow these steps: Inbound Rules 1. From Administrative Tools, open the Windows Firewall with Advanced Security window. 2. Select Inbound Rules from the panel on the left and click New Rule in the Actions column. 3. New Rule Rule Type step: When the New Inbound Rule Wizard opens, select Program (if it is not already selected), and click Next. 4. Temporarily leave the New Inbound Rule Wizard and toggle back to Administrative Tools. Open the Services window and find SQL Server Browser in the list. Right-click the service and select Properties. 7 Revised 02/03/15

8 5. In the Properties dialog box, copy the Path to executable information and close the box. 6. New Rule Program step: Back in the New Inbound Rule Wizard, select This program path and paste the copied path into the program path box. (If quotation marks are also pasted into the box, remove them before proceeding.) Click Next. 7. New Rule Action step: Choose Allow the connection and click Next. 8. New Rule Profile step: Select all of the check boxes: Domain, Private, and Public. Click Next. 9. New Rule Name step: Assign a name to the new rule and click Finish. 10. Now, the new rule is included in the list of Inbound Rules. 8 Revised 02/03/15

9 11. Repeat steps 2 through 9 to create another inbound rule for the SQL Server (MSSQLSERVER) service. 12. When this process is completed, you will have two new inbound rules. Outbound Rules 1. From Administrative Tools, open the Windows Firewall with Advanced Security window. 2. Select Outbound Rules from the panel on the left and click New Rule in the Actions column. 3. New Rule Rule Type step: When the New Outbound Rule Wizard opens, select Program (if it isn t already selected), and click Next. 4. Temporarily leave the New Outbound Rule Wizard and toggle back to Administrative Tools. Open the Services window and find SQL Server Browser in the list. Right-click the service and select Properties. 9 Revised 02/03/15

10 5. In the Properties dialog box, copy the Path to executable information and close the box. 6. New Rule Program step: Back in the New Outbound Rule Wizard, select This program path and paste the copied path into the program path box. (If quotation marks are also pasted into the box, remove them before proceeding.) Click Next. 7. New Rule Action step: Choose Allow the connection and click Next. 8. New Rule Profile step: Select all of the check boxes: Domain, Private, and Public. Click Next. 9. New Rule Name step: Assign a name to the new rule and click Finish. 10. Now, the new rule is included in the list of Outbound Rules. 10 Revised 02/03/15

11 11. Repeat steps 2 through 9 to create another outbound rule for the SQL Server (MSSQLSERVER) service. 12. When this process is completed, you will have two new outbound rules. 13. Close the Windows Firewall with Advanced Security window. 11 Revised 02/03/15

12 Appendix B Related Links The most current version of this document & Win Srv 2008 Firewall.pdf PROFITstar, PROFITability, Profitstar Suite, and PROFITstar Portfolio Installation instructions for existing clients Installation instructions for new clients System requirements Release notes PROFITstar s Hosted Budget Manager System requirements Profitstar Web Services for Optimizer Installation guide Web Services Install.pdf For more IT-related documentation, refer to the PROFITstar, PROFITability & CUPRO Release Information and Documentation pages, in ProfitStars For Clients Portal. 12 Revised 02/03/15