# Firewall ports for Active Directory replication

**URL:** <https://boards.straightdope.com/t/firewall-ports-for-active-directory-replication/237346>\
**Category:** Factual Questions\
**Created:** [March 30, 2004, 5:14pm UTC](https://boards.straightdope.com/t/firewall-ports-for-active-directory-replication/237346 "2004-03-30T17:14:43Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bricker](https://avatars.discourse-cdn.com/v4/letter/b/977dab/32.png) [@Bricker](https://boards.straightdope.com/u/Bricker)\
**Post date:** [March 30, 2004, 5:14pm UTC](https://boards.straightdope.com/t/firewall-ports-for-active-directory-replication/237346/1 "2004-03-30T17:14:43Z")

</div>

I have two domain controllers for the same domain, in two sites. The sites are now going to be separated by a firewall. What ports need to be open between the two DCS on the firewall so that AD continues to replicate happily?

---

<div class="post-metadata">

**Author:** ![Servo](https://avatars.discourse-cdn.com/v4/letter/s/49beb7/32.png) [@Servo](https://boards.straightdope.com/u/Servo)\
**Post date:** [March 30, 2004, 6:23pm UTC](https://boards.straightdope.com/t/firewall-ports-for-active-directory-replication/237346/2 "2004-03-30T18:23:06Z")

</div>

You need to open more than one port, I think it’s about 15 of them.

There’s actually a couple of different ways to get AD to replicate through a firewall. Microsoft has a [little article about it](http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp) that may help.