Document Number: OSUP1045
Product: Observer 9.x
Date: 3-31-04
Title: Configuring the Windows XP SP2 Security Center Firewall to allow Observer Probes and Consoles to Communicate

Configuring the Windows XP SP2 Security Center Firewall to Allow Observer Probes and Consoles to Communicate

The standard Windows XP Service Pack 2 installation includes the Microsoft Security Center and its personal firewall. This firewall blocks all incoming traffic unless the application and port are specified in the firewall's exception list.

The firewall must be reconfigured on each Console and Probe system that is running Windows XP Service Pack 2. To do so, follow these steps:

1. Open the control panel and click on the Security Center icon to display the setup screen:
   
   
   

2. Click on the Windows Firewall icon located at the bottom of the screen to display the Windows Firewall setup dialog, and click on the Exceptions tab. The following is displayed:
   
   
   

3. Add the following two TCP ports to the exception list:

   Number:	Name:
   25901	Observer Data Port
   25903	Observer Redirect Port

   To add a port, click the Add Port button to display the following dialog:
   
   
   
   You can enhance security by configuring the firewall to only allow traffic from particular IP addresses (or a range of IP addresses) on the specified port. To do this, click the Change Scope... button.
   

4. Click on OK twice to close out of the Add Port window.

   Back at the Windows Firewall / Exceptions tab you need only check the checkmark boxes beside Observer Data Port and Observer Redirect Port and then click OK.

   

   You are finished setting up the Windows Firewall to work with Observer and your Probe(s).
    
   

5. Repeat steps 1 through 4 on each of the Windows XP SP2 systems on which you have installed Observer consoles and probes.