Software Deployment Question
What ports are required for Kace patch deployment to Windows?
01/14/2016 4680 views
Q1. What ports are required for Kace patch deployment to Windows?
We have a few production servers and one dev server in our DMZ that communicate with Kace, but don't receive patches. Their system details are current. I can't run Windows Update either. I ran patches for our Dev environment this morning and all patched except the one dev server in the DMZ.
I checked the port listing here: https://support.software.dell.com/kb/111775 But our Network Team has assured me they are not blocking any ports. I'd like to go to them with a specific port to check if possible.
According to what I've read, only 80 and 443 are required for for "patching and Dell updates".
Q2. If our Network Team's response is that they don't block the specific ports required for Kace, does anyone have any ideas or suggestions for what may cause this?
Thanks for any help or suggestions.
Community Chosen Answer
Please log in to answer
generally you will need only port 80/tcp (or port 443/tcp of you use SSL) to be able to receive the Patch Manager / Dell Updates but if you are using replication and you're replicating the Patch content and Dell updates on a Samba share you will need to allow the client to read from that share as well.
Check that the port 52230/tcp of the K1000 is reachable as well. It is needed to establish the AMP (Agent connection).
You can better analyse the problem forcing the patch job toward a problematic client and then having a look to the logs on the client that you can find under %ProgramData%\dell\kace\user (order them by date/time modified and start to have a look to the most recently modified)
You can even use Wireshark on the client to identify if there are problems to establish connections with the K1000.
Marco - StockTrader
Answered 01/14/2016 by: StockTrader