Ports for the Receive and Send Servers
For complete information about securing your BizTalk Server deployment, see Sample BizTalk Server Architectures.
The following table lists the ports you must configure for the receive and send servers to access the services they need. The firewall on which you need to open the ports depends on where the destination server is in your architecture. You must open these ports both for inbound and outbound traffic.
| Service or Application context | Destination Server | Destination Service | Port | Protocol | Reason |
|---|---|---|---|---|---|
| BizTalk service account | File share EDI documents home share |
Receive/Send server | 445 | TCP | Retrieve and drop files to file location for the File adapter |
| BizTalk service account | FTP Server | FTP service | 20 | TCP | For the FTP adapter to retrieve and drop files to FTP Server |
| BizTalk service account | FTP Server | FTP service | 21 | TCP | For the FTP adapter to retrieve and drop files to FTP Server |
| BizTalk service account | POP3 Server | POP3 service | 110 | TCP | For the POP3 adapter to retrieve email from POP3 Server |
| BizTalk service account | Processing Server | Windows Message Queuing | 1801 | TCP | For the BizTalk Message Queuing adapter to receive and send messages to the BizTalk runtime |
| Connection string | SQL adapter target | SQL Server | 1433 | TCP | Retrieve and send messages from databases used by SQL adapter |
| Connection string | SQL adapter target | DTC | 135 | TCP | Transacted connection to SQL Server for SQL adapter. RPC Endpoint Manager. |
| Connection string | SQL adapter target | DTC | 49152-65535 | TCP | Secondary RPC ports for MSDTC on SQL adapter destinations Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| BizTalk service account | SMTP/Exchange | SMTP | 25 | TCP | For the SMPT adapter to connect to SMTP server |
| Logged on user | BizTalk Management database | SQL Server | 1433 | TCP | To create and configure the BizTalk Management database |
| Logged on user | BizTalk Management database | DTC | 135 | TCP | Transacted connection to SQL Server to create, configure, and update the database |
| Logged on user | BizTalk Management database | DTC | 49152-65535 | TCP | Secondary RPC ports Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| Logged on user | MessageBox database | SQL Server | 1433 | TCP | To create and configure the MessageBox database |
| Logged on user | MessageBox database | DTC | 135 | TCP | Transacted connection to SQL Server to create the host |
| Logged on user | MessageBox database | DTC | 49152-65535 | TCP | Secondary RPC ports Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| SSO service account | SSO database | SQL Server | 1433 | TCP | For the Enterprise Single Sign-On service to connect to the SSO database |
| Logged on user | SSO database | DTC | 135 | TCP | Transacted connection to SQL Server to connect to the SSO database |
| Logged on user | SSO database | DTC | 49152-65535 | TCP | Secondary RPC ports Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| Logged on user | Tracking database | SQL Server | 1433 | TCP | To create and configure the Tracking database |
| Logged on user | Tracking database | DTC | 135 | TCP | Transacted connection to SQL Server |
| Logged on user | Tracking database | DTC | 49152-65535 | TCP | Secondary RPC ports Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| Logged on user | Business Rule Engine database | SQL Server | 1433 | TCP | To create and configure the Business Rule Engine database |
| Logged on user | Business Rule Engine database | DTC | 135 | TCP | Transacted connection to SQL Server to create, configure, and update the database |
| Logged on user | Business Rule Engine database | DTC | 49152-65535 | TCP | Secondary RPC ports Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| Logged on user | BAM Analysis database | OLAP | 2383 (SQL Server 2005 Analysis Services) | TCP | To update and retrieve information from the BAM Analysis database |
| Logged on user | BAM Analysis database | OLAP Server File system | 445 | TCP | To create the OLAP data file (.mdb) on the remote computer |
| Logged on user | BAM Analysis database | OLAP | 2725 | TCP | For data retrieval for analysis (PivotTable® reports) |
| Logged on user | BizTalk Analysis database | OLAP | 2383 (SQL Server 2005 Analysis Services) | TCP | To create and configure the BizTalk Analysis database Note: The Processing Servers need to connect to this database only when you run the BizTalk Configuration Manager. |
| Logged on user | BizTalk Analysis database | OLAP Server File system | 445 | TCP | To create the OLAP data file (.mdb) on the remote computer Note: The Processing Servers need to connect to this database only when you run the BizTalk Configuration Manager. |
| Logged on user | BizTalk Analysis database | OLAP | 2725 | TCP | To create and configure the database, and to retrieve data for analysis (PivotTable reports) |
| Single Sign-On service account | Master secret server | RPC | 135 | TCP | Transacted connection to SQL Server for the SSO service to connect to the master secret server |
| Single Sign-On service account | Master secret server | Secondary RPC | 49152-65535 | TCP | Secondary RPC ports for the SSO service to connect to the master secret server. Note: You can change to larger dynamic port range or better use fixed port for MSDTC and EntSSO services. |
| Service account for a BizTalk Host instance | MessageBox database | SQL Server | 1433 | TCP | To update and retrieve information from the database during run time operations |
| Service account for a BizTalk Host instance | BizTalk Management database | SQL Server | 1433 | TCP | To update and retrieve information from the database during run time operations |
| Service account for a BizTalk Host instance | SSO database | SQL Server | 1433 | TCP | To update and retrieve information from the database during run time operations |
| Service account for a BizTalk Host instance | Tracking database | SQL Server | 1433 | TCP | To update and retrieve information from the database during run time operations |
See Also
Server Naming Conventions
HTTP Adapter Security Recommendations
SOAP Adapter Security Recommendations
FTP Adapter Security Recommendations
SMTP Adapter Security Recommendations
File Adapter Security Recommendations
Large Distributed Architecture with Information Worker Services
Required Ports for BizTalk Server