These general guidelines outline the firewall ports that should be opened for a fully functioning Migrator Pro for Exchange project. We assume that the messaging and Active Directory environments in both the source and target are configured according to Microsoft’s published guidance. For example, these guidelines assume that on-premises Exchange servers can freely communicate with global catalog servers within the same environment, and network isolation boundaries do not exist.
This table should be considered as a reference, but ultimately the ports are those required by Microsoft technologies, so they are the authoritative source on what is needed. Please refer to the Microsoft documentation if there are questions about which ports are required for Migrator Pro for Exchange to communicate or utilize these technologies.
|
From |
To |
Component |
Protocol |
Port (Default) |
Remark |
|
Migrator Pro for Exchange |
Source Domain Controller |
Profile Outlook |
TCP |
25 |
Profile Outlook |
|
Migrator Pro for Exchange |
Target SMTP messaging server |
Migrator Pro for Exchange MCP Service |
TCP |
25 |
Send email notifications |
|
Source Messaging servers |
Target messaging servers |
Coexistence |
TCP |
25 |
Mail redirection |
|
Target Messaging servers |
Source messaging servers |
Coexistence |
TCP |
25 |
Mail redirection |
|
Migrator Pro for Exchange |
Source DNS servers |
Migrator Pro for Exchange MCP Service |
TCP/IP |
53 |
DNS lookups |
|
Migrator Pro for Exchange |
Target DNS servers |
Lookup |
TCP |
53 |
DNS |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Outlook RPC over HTTP(S) |
TCP |
80 |
Profile Outlook |
|
Migrator Pro for Exchange |
Target Domain Controllers |
Outlook RPC over HTTP(S) |
TCP |
80 |
Profile Outlook |
|
Migrator Pro for Exchange |
Source messaging servers |
Outlook RPC over HTTP(S) |
TCP |
80 |
Profile Outlook |
|
Migrator Pro for Exchange |
Target messaging servers |
Outlook RPC over HTTP(S) |
TCP |
80 |
Profile Outlook |
|
Source Domain Controllers |
Target messaging servers |
Authentication |
TCP |
88 |
Kerberos |
|
Target messaging servers |
Source Domain Controllers |
Authentication |
TCP |
88 |
Kerberos |
|
Migrator Pro for Exchange |
Target Domain Controllers |
Authentication |
TCP/UDP |
88 |
Kerberos |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
Authentication |
TCP/UDP |
88 |
Kerberos |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Authentication |
TCP |
88 |
Kerberos |
|
Migrator Pro for Exchange |
Source Domain Controllers |
POP3 |
TCP |
110 |
Profile Outlook |
|
Migrator Pro for Exchange |
Target Domain Controllers |
Windows Time |
TCP |
123 |
Windows Time |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
Windows Time |
TCP |
123 |
Windows Time |
|
Migrator Pro for Exchange |
Target messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
135 |
RPC locator |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP Service |
TCP |
135 |
RPC locator |
|
Source messaging servers |
Target messaging servers |
RPC End Point |
TCP |
135 |
RPC Endpoint |
|
Target messaging servers |
Source messaging servers |
RPC End Point |
TCP |
135 |
RPC Endpoint |
|
Migrator Pro for Exchange |
Source messaging servers |
RPC End Point |
TCP |
135 |
RPC Endpoint |
|
Migrator Pro for Exchange |
Target Domain Controllers |
RPC End Point |
TCP |
135 |
RPC Endpoint (domain integration) |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
RPC End Point |
TCP |
135 |
RPC Endpoint (domain integration) |
|
Migrator Pro for Exchange |
Target messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
137 |
NetBIOS Queries for domain binds |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP Service |
TCP |
137 |
NetBIOS Queries for domain binds |
|
Source Domain Controllers |
Target Domain Controllers |
NetBIOS Queries for domain binds |
TCP |
137 |
NetBIOS Queries for domain binds |
|
Migrator Pro for Exchange |
Target messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
138 |
NetBIOS Queries for domain binds |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP Service |
TCP |
138 |
NetBIOS Queries for domain binds |
|
Migrator Pro for Exchange |
Target messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
139 |
NetBIOS Queries for domain binds |
|
Migrator Pro for Exchange |
Source Domain Controller |
Migrator Pro for Exchange MCP Service |
TCP |
139 |
NetBIOS Queries for domain binds |
|
Migrator Pro for Exchange |
Target messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
389 |
LDAP for object discovery |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP Service |
TCP |
389 |
LDAP for object discovery |
|
Migrator Pro for Exchange |
Source Domain Controllers |
LDAP |
UDP |
389 |
LDAP for object discovery |
|
Source Domain Controllers |
Target messaging servers |
LDAP |
TCP |
389 |
LDAP |
|
Target messaging servers |
Source Domain Controllers |
LDAP |
TCP |
389 |
LDAP |
|
Migrator Pro for Exchange |
Target Domain Controllers |
LDAP |
TCP/UDP |
389 |
LDAP (domain integration) |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
LDAP |
TCP/UDP |
389 |
LDAP (domain integration) |
|
Migrator Pro for Exchange |
Target CAS messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
443 |
PowerShell remoting |
|
Source messaging servers |
Target messaging servers |
Replication Proxy |
TCP |
443 |
Mailbox Replication Proxy service uses port 443 to communicate with other Exchange 2010 client access server via HTTPS. |
|
Target messaging servers |
Source messaging servers |
Replication Proxy |
TCP |
443 |
Mailbox Replication Proxy service uses port 443 to communicate with other Exchange 2010 client access server via HTTPS. |
|
Migrator Pro for Exchange |
Target Domain Controller |
SSL |
TCP |
443 |
Outlook profile configuration |
|
Migrator Pro for Exchange |
Source Domain Controllers |
SSL |
TCP |
443 |
Outlook profile configuration |
|
Target messaging servers |
Source Domain Controllers |
SSL |
TCP |
443 |
SSL |
|
Target messaging servers |
Source messaging servers |
SSL |
TCP |
443 |
SSL |
|
Target messaging servers |
Source Domain Controllers |
SSL |
TCP |
443 |
SSL |
|
Migrator Pro for Exchange |
Target messaging servers |
SSL |
TCP |
443 |
SSL |
|
Source messaging servers |
Target Domain Controllers |
SSL |
TCP |
443 |
SSL |
|
Migrator Pro for Exchange |
Target messaging servers |
Migrator Pro for Exchange MCP Service |
TCP |
445 |
Active Directory Authentication |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP Service |
TCP |
445 |
Active Directory Authentication |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
AD |
TCP/UDP |
445 |
Replication, User and Computer Authentication, Group Policy, Trusts (Domain integration) |
|
Migrator Pro for Exchange |
Target Domain Controllers |
AD |
TCP/UDP |
445 |
Replication, User and Computer Authentication, Group Policy, Trusts (Domain integration) |
|
Source messaging servers |
Target Domain controllers |
DS Service |
TCP |
445 |
Microsoft-DS Service |
|
Target messaging servers |
Source Domain Controllers |
DS Service |
TCP |
445 |
Microsoft-DS Service |
|
Source messaging servers |
Target messaging servers |
DS Service |
TCP |
445 |
Microsoft-DS Service |
|
Target messaging servers |
Source messaging servers |
DS Service |
TCP |
445 |
Microsoft-DS Service |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
AD |
TCP/UDP |
445 |
Kerberos Change/set Password (Domain integration) |
|
Migrator Pro for Exchange |
Target Domain Controllers |
AD |
TCP/UDP |
445 |
Kerberos Change/set Password (Domain integration) |
|
Migrator Pro for Exchange |
Source messaging servers |
Outgoing email port Outlook |
TCP |
587 |
Outgoing email port Outlook |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
LDAP SSL |
TCP |
636 |
LDAP SSL (Domain integration) |
|
Migrator Pro for Exchange |
Target Domain Controllers |
LDAP SSL |
TCP |
636 |
LDAP SSL (Domain integration) |
|
Source messaging servers |
Target messaging servers |
Mailbox Move |
TCP |
808 |
Mailbox Replication Service uses to communicate |
|
Target messaging servers |
Source messaging servers |
Mailbox Move |
TCP |
808 |
Mailbox Replication Service uses to communicate |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Pop3 |
TCP |
993 |
Profile Outlook |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Imap4 |
TCP |
995 |
Profile Outlook |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
LDAP GC |
TCP |
3268 |
LDAP GC Domain integration |
|
Migrator Pro for Exchange |
Target Domain Controllers |
LDAP GC |
TCP |
3268 |
LDAP GC Domain integration |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP |
TCP |
3268 |
Update Forest |
|
Source Domain Controller |
Target messaging servers |
LDAP |
TCP |
3268 |
LDAP |
|
Target messaging servers |
Source Domain Controllers |
LDAP |
TCP |
3268 |
LDAP |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
LDAP GC SSL |
TCP |
3269 |
LDAP GC SSL Domain integration |
|
Migrator Pro for Exchange |
Target Domain Controllers |
LDAP GC SSL |
TCP |
3269 |
LDAP GC SSL Domain integration |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
RPC, DFSR (SYSVOL) |
TCP |
5722 |
RPC, DFSR (SYSVOL) Domain integration |
|
Migrator Pro for Exchange |
Target Domain Controllers |
RPC, DFSR (SYSVOL) |
TCP |
5722 |
RPC, DFSR (SYSVOL) Domain integration |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
SOAP |
TCP |
9389 |
SOAP Domain integration |
|
Migrator Pro for Exchange |
Target Domain Controllers |
SOAP |
TCP |
9389 |
SOAP Domain integration |
|
Source messaging servers |
Target messaging servers |
Mailbox Store |
TCP Dynamic |
1024>65535 |
Mailbox Store |
|
Target messaging servers |
Source messaging servers |
Mailbox Store |
TCP Dynamic |
1024>65535 |
Mailbox Store |
|
Migrator Pro for Exchange SQL |
Target Domain Controllers |
RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS |
TCP/UDP Dynamic |
49152>65535 |
Domain integration |
|
Migrator Pro for Exchange |
Target Domain Controllers |
RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS |
TCP/UDP Dynamic |
49152>65535 |
Domain integration |
|
Migrator Pro for Exchange |
Source Domain Controllers |
Migrator Pro for Exchange MCP |
TCP Dynamic |
49152>65535 |
Update Forest |
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
