Tuesday, April 28, 2009

Opening Windows Firewall Ports on PDP via Remote Agent

Objective : Creating package that open Windows Firewall ports and deploy it to selected workstation.
Enviroment : ZENworks Patch Management 6.3/6.4 | MS Windows

Package Creation

- Go to Vulnerabilities ->Packages and click Create.
- In Package Editor main page, enter a name for the package and put in some descriptions on this package in the Description field. Click Next
- Select the operating systems (i.e. Win2k or Win2K3) and click Next
- Click Next in Add files and directories to package page
- Select Command as the type of script and BAT as script language. Click Edit
- Enter the following in the script editor and click OK

etsh firewall add portopening TCP 25253 ZPMTCP enable
etsh firewall add portopening UDP 25253 ZPMUDP enable

- The command appears in the scripting page now. Enable Script Execution Directory and type %TEMP% and click Next.

- Summary of the new package is displayed. Click Next and click Finish

Package Deployment

- Go to -> Vulnerabilities -> Packages and select locally Created Packages. Select Open port 25253 on PDP package and click Deploy.
- In the Devices/Groups Selection page, select the PDP Servers/hosts in which this package needs to be deployed and click Next
- Verify the package selection and click Next
- Accept the terms and conditions of this end user license agreement is selected and click Next
- Select Agent local Time and click Change to modify deployment start time.
- Modify the message where necessary and set other options if required
- Click Finish and package is ready for deployment
- Once agent successfully push to the client click Install

No comments: