2.5 Understanding Firewall Considerations for Control Center Components

NetIQ Corporation recommends distributing Control Center components across computers to improve performance. Because the command queue service runs under a Windows user account and connects to QDBs and the CCDB using that account, ensure that no firewall is present between the command queue service and QDB computers and the command queue service and CCDB computers. On computers running Microsoft Windows Server 2008 or later, a firewall is enabled by default. At a minimum, you will need to open ports 1433 and 135. For information about other SQL Server ports you might need to open, see Reviewing AppManager Port Usage.