Server and ZAPro Permissions

[Socal]

Hi, me again lol :D

Just installed ZAPro 3.x on Server.

I question whether to admit or deny the following access, perhaps someone knows off the top of their head? Otherwise, a-hunting I must go..:


App: winlogon.exe / Windows NT Logon
Dest IP: Internal IP

----------

App: LLSSRV.EXE / MS License Server
Dest IP: Internal IP:389

----------

App: ntfrs.exe / File Replication Service
Dest IP: Internal IP

----------

App: dfssvc.exe / Windows NT Distributed File System Service
Dest IP: Internal IP:135

----------

App: WINS.EXE / WINS SERVER
Dest IP: 224.x.x.xx:Name

----------



Thanks.. :)

[Mntsnow]

Personally running ZA on a SERVER is pointless....If the server does in fact get compromised it's going to be thru one of the services it's running that you have already granted permissions to go thru ZA...thus it's only a "feel good/looks good" measure ;)

Now as for your questions

App: winlogon.exe / Windows NT Logon
Dest IP: Internal IP

Yes
----------

App: LLSSRV.EXE / MS License Server
Dest IP: Internal IP:389

Yes
----------

App: ntfrs.exe / File Replication Service
Dest IP: Internal IP

Yes
----------

App: dfssvc.exe / Windows NT Distributed File System Service
Dest IP: Internal IP:135

Yes
----------

App: WINS.EXE / WINS SERVER
Dest IP: 224.x.x.xx:Name

No as your not running Wins

[Socal]

Thanks, Mike :bunny:

Per our discussion, I have made recommended adjustments to the system. ;) I appreciate your reply regardless.