HP Smart Update Manager (User Guide) - Manual (Page 67)

Troubleshooting 67
Enabling ports in HP Smart Update Manager
The ports that HP SUM uses cannot be configured. When HP SUM initiates communications to remote targets,
it uses several well-known ports, depending on the operating system. For Windows, ports 138 and 445 are
used to connect to remote targets (equivalent to remote and file print share functionality). For Linux, port 22
(SSH) is used to start the communications with the remote target.
HP SUM uses defined ports to communicate between the remote target and the workstation where HP SUM
is executing. When you run HP SUM, the administrator/root privileges are used to dynamically register the
port with the default Windows and Linux firewalls for the length of the application execution, then the port is
closed and deregistered. All communications are over a SOAP server using SSL with additional functionality
to prevent man-in-the-middle, packet spoofing, packet replay, and other attacks. The randomness of the port
helps prevent port scanning software from denying service to the application. The SOAP server is deployed
on the remote target using the initial ports described above (ports 138, 445, and 22) and then allocates
another independent port as documented below for its communications back to the workstation where HP
SUM is running. During shutdown of HP SUM, the SOAP server is shutdown and removed from the target
server, leaving the log files.
To deploy software to remote targets on their secure networks using HP SUM, the following ports are used.
Windows
Ports Description
Ports 445 and 137/138/139
(Port 137 is used only if you are
using NetBIOS naming service.)
These ports are needed to connect to the remote ADMIN$ share on
target servers. These are the standard ports Windows servers use to
connect to remote file shares. If you can connect remotely to a remote
Windows file share on the target server, the proper ports are open.
Ports 60000-60007 Random ports are used in this range to pass messages back and forth
between the local and remote systems using SSL. These ports are used on
the system running HP SUM to send data to the target server.
Several internal processes within HP SUM automatically use port 60000
when it is available. If there is a port conflict, the manager uses the next
available port. There is no guarantee that the upper limit is 60007 as it
is dependent on how many target devices are selected for installation.
Ports 61000-61007 These ports are used from the target server back to the system running HP
SUM. The same mechanism is used by the remote access code as the
60000 ports, with the first trial port being 61000. There is no guarantee
that the upper limit is 61007 when a conflict occurs. For the case of
ipv4-only and one NIC, the lowest available port is used by HP SUM to
pass information between processes on the local workstation where HP
SUM is executed, and the next available port is used to receive messages
from remote servers.
Port 62286
This port is the default port for some internal communications. It is the
listening on the remote side if there is no conflict. If a conflict occurs, the
next available port is used.