Windows Firewall and SSO agent working together

06/27/2022 3 People found this article helpful 366,262 Views

Description

We always recommend to have Windows Defender and Windows firewall to be disabled to facilitate SSO authentification, and usually if they are enabled we get an error of "Network path not found" on SSO agent.

This article is about which port needs to be allowed on Windows Firewall so the SSO agent may be able to authenticate the user.

Resolution

For WMI, we need to open the TCP port 445, and for NETAPI we need to use TCP port 135, below are the steps to open them:

From the Start menu, click Control Panel, click System and Security, and then click Windows Firewall. Control Panel is not configured for 'Category' view, you only need to select Windows Firewall.
Click Advanced Settings
.
Click Inbound Rules
.
Click New Rule in the Actions window.
Click Rule Type of Port.
Click Next.
On the Protocol and Ports page click TCP.
Select Specific Local Ports and type a value of 445 for WMI or 135 for NETAPI.
Click Next.
On the Action page click Allow the connection.
Click Next.
On the Profile page click the appropriate options for your environment.
Click Next.
On the Name page enter a name of preference.
Click Finish.
Restart the computer.