> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Windows Firewall

> Ports Syteca needs open in Windows Firewall, and how to open them on current and legacy Windows versions.

<Note>
  Windows Firewall is configured automatically for the ports it can detect if it's enabled during Application Server installation. Use this page to configure it manually, or to configure a different (non-Windows) firewall.
</Note>

## Ports reference

Open these ports depending on your deployment and configuration:

| Port(s)               | Purpose                                                                                                                                                                      |
| --------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **TCP/9447**          | Required. Application Server to Client connection, for receiving session data.                                                                                               |
| **TCP/22713 & 22714** | Management Tool to Application Server connection, if installed on different machines. Enable on both machines.                                                               |
| **TCP/22712**         | Connection to the [Tray Notifications application](/docs/administration/deployment/tray-notifications), if installed on a different machine than the Application Server.          |
| **TCP/443**           | Access to the Management Tool, if it's installed on the same machine as the Application Server.                                                                              |
| **TCP/135 & 445**     | Remote Windows Client installation.                                                                                                                                          |
| **TCP/5432**          | Application Server to PostgreSQL, if installed on different machines.                                                                                                        |
| **TCP/1433**          | Application Server to MS SQL Server, if installed on different machines. See [Configuring the MS SQL Server database](/docs/administration/database/creating-databases-manually). |

## Configure the firewall on current Windows versions

<Note>
  Applies to Windows 11, Windows 10, Windows 8.1, Windows 8, Windows 7, and Windows Server 2012. It isn't necessary to disable the firewall on any of these.
</Note>

Remote Client installation requires inbound connections allowed for **Remote Service Management (RPC)**, plus **File and Printer Sharing** enabled.

### Enable Remote Service Management (RPC)

<Steps>
  <Step title="Open Windows Firewall">
    Go to **Control Panel > System and Security > Windows Firewall**, then click **Advanced settings**.
  </Step>

  <Step title="Open the RPC inbound rule">
    In **Windows Firewall with Advanced Security**, click **Inbound Rules**, then double-click **Remote Service Management (RPC)**.
  </Step>

  <Step title="Enable and allow the rule">
    On the **General** tab, select **Enabled** and choose **Allow the connection** under **Action**.
  </Step>

  <Step title="Set the network profile">
    On the **Advanced** tab, select the profile(s) matching the network used to connect remote computers to the server.
  </Step>

  <Step title="Apply">
    Click **Apply**, then **OK**, and close the Windows Firewall window.
  </Step>
</Steps>

### Enable File and Printer Sharing

<Steps>
  <Step title="Open Windows Firewall">
    Go to **Control Panel > System and Security > Windows Firewall**, then click **Allow an app or feature through Windows Firewall**.
  </Step>

  <Step title="Change settings">
    Click **Change settings**.
  </Step>

  <Step title="Enable the feature">
    Select the **File and Printer Sharing** checkbox and click **OK**.
  </Step>
</Steps>

<Frame caption="Enabling the Remote Service Management (RPC) inbound rule.">
  <img src="https://mintcdn.com/syteca/0FlD-vkHsBA1azVX/images/administration/deployment/windows-firewall-rpc-rule.png?fit=max&auto=format&n=0FlD-vkHsBA1azVX&q=85&s=4986cc419980589a9d96d2bccd44f14b" alt="Windows Firewall Advanced Security window with the RPC inbound rule properties open" width="1121" height="822" data-path="images/administration/deployment/windows-firewall-rpc-rule.png" />
</Frame>

## Legacy Windows versions

<Warning>
  Windows Server 2003 reached end of life in 2015. This section is preserved for environments still running it, but isn't recommended for new deployments.
</Warning>

It isn't necessary to disable the firewall on Windows Server 2003. To allow remote Client installation, enable File and Printer Sharing:

<Steps>
  <Step title="Open Windows Firewall">
    Go to **Start > Control Panel > Windows Firewall**.
  </Step>

  <Step title="Open the Exceptions tab">
    Select the **Exceptions** tab.
  </Step>

  <Step title="Enable the feature">
    Select the **File and Printer Sharing** checkbox.
  </Step>
</Steps>

## Related

<CardGroup cols={2}>
  <Card title="Database requirements" icon="database" href="/docs/administration/requirements/database-requirements">
    Ports and versions for MS SQL Server and PostgreSQL.
  </Card>

  <Card title="Windows Clients" icon="windows" href="/docs/administration/clients/windows">
    Windows Client installation and configuration.
  </Card>

  <Card title="Creating databases manually" icon="database" href="/docs/administration/database/creating-databases-manually">
    Manual database setup for MS SQL Server and PostgreSQL.
  </Card>
</CardGroup>