Set up firewalls, ports, and domains for System Center Configuration Manager

Applies to: System Center Configuration Manager (Current Branch)

To prepare your network to support System Center Configuration Manager, plan to set up infrastructure like firewalls to pass the communications used by Configuration Manager.

Consideration Details
Ports and protocols that different Configuration Manager capabilities use. Some ports are required, and you can customize other domains and services. Most Configuration Manager communications use common ports like port 80 for HTTP or 443 for HTTPS communication. However, some site system roles support the use of custom websites and custom ports.

Before you deploy Configuration Manager, identify the ports that you plan to use and set up firewalls accordingly.

If you need to change a port after you install Configuration Manager, don't forget to update firewalls on devices and the network and also change the configuration of the port from within Configuration Manager.

For more information see:
- How to configure client communication ports
- Ports used in Configuration Manager
- Internet access requirements for the service connection point
Domains and services that site servers and clients might need to use. Configuration Manager capabilities can require site servers and clients to have access to specific services and domains on the Internet, like Windowsudpate.microsoft.com or the Microsoft Intune service.

If you will use Microsoft Intune to manage mobile devices, you must also set up access to ports and domains that Intune requires.
Proxy servers for site system servers and for client communications. You can specify separate proxy servers for different site system servers and clients. Because these configurations are made at the time you install a site system role or client, you only need to be aware of the proxy server configurations for later reference when you configure site system roles and clients.

If you're not sure your deployment will need to use proxy servers, review Proxy server support in System Center Configuration Manager to learn about site system roles and client actions that can use a proxy server.