question

Ram-0461 avatar image
0 Votes"
Ram-0461 asked CandyLuo-MSFT commented

SMB folder access goes to port 5985 instead of 445 from a windows 10 machine

I have encountered an issue with accessing network shared folder while working using corporate VPN.

The folder access times out and when I look at firewall logs, I see the client is trying connect to port 5985 instead of 445.

If I clear the current session from the firewall I get access to the folder and I see traffic goes to port 445 afterwards.

This happens whenever I try to connect to the shared folder for the first time in the day.

I also noticed, when I disconnect and reconnect to VPN, I'm able to connect to the folder.

Is there a way to stop the client from connecting to port 5985 for the first attempt?

windows-server
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CandyLuo-MSFT avatar image
0 Votes"
CandyLuo-MSFT answered

Hi,

Did you use third-party VPN software or windows build-in VPN?

Please try to capture SMB traffic on file server and confirm whether the client is trying to connect port 5985. Please understand, analysis of network log is beyond our forum support level and due to forum security policy, we have no such channel to collect user log information. If you want to find the cause, we recommend you open a case with MS Professional tech support service, they will help you open a phone or email case to Microsoft, so that you would get a technical support on a one-to-one basis while ensuring private information.

Here is the link:

https://support.microsoft.com/en-us/gp/customer-service-phone-numbers

Best Regards,
Candy


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Ram-0461 avatar image
0 Votes"
Ram-0461 answered CandyLuo-MSFT commented

It's third party VPN software, Cisco anyconnect. Will try to perform a capture and log a case if required.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Appreciate your understanding. Have a wonderful day!

0 Votes 0 ·