Opening Ports in Windows Firewall

Last reviewed: 07/19/2010
Article ID: R11197

The information in this article applies to:

Summary

One of the most powerful ways to protect your data from unauthorized access is by using a firewall. Having your firewall configured correctly is just as important. This article discusses the basics of what a firewall is, what a port is, and how to configure a common software firewall, Windows Firewall, for use with STI Server and our Client Server Version (CSV) software.

What is a Firewall?

A firewall can be a software program or hardware device that is used to secure your computer by blocking or screening data being sent to and from your computer. Both types protect your computer or network from hackers, viruses, and other malicious types of software from accessing your computer. A firewall can block incoming data (such as the Windows Firewall included in Windows XP or Windows Server 2003), or both incoming and outgoing data (such as Symantec Firewall and the Windows Firewall included with Windows Vista).

Firewalls are most commonly used for blocking traffic across the Internet, but they are also used for blocking traffic to and from computers on a firm's network. Many firms will have a firewall for Internet traffic, but will not use a firewall on their server for internal network traffic. Firms that use a firewall on their server for internal network traffic must manually adjust their firewall in order for STI Server to function properly.

What is a Port?

A port is a gateway for transferring information between computers. These numbered gateways are used to exchange information between programs on either side of the firewall.

Program Exceptions vs. Port Exceptions

Firewalls are typically capable of allowing access to all programs, blocking access to all programs, allowing access to specific programs, and allowing access to specific ports. Most firewalls allow you to configure program exceptions or port exceptions. A program exception allows connection to a program, regardless of the port it uses; whereas a port exception allows access to a specific port, regardless of which program uses it.

How a Firewall Affects STI Server

Ports are used by computers to route TCP/IP network traffic to different programs. STI Server requires the ability to pass information back and forth between STI Server and workstations. This information is passed through ports. If a firewall is employed to block access between the server and workstations, the STI Server software will not work properly.

By default, STI Server requires the use of four separate ports or program exceptions as shown in the following table.  These exceptions need to be implemented in order for communication to occur between the network and STI Server, and between STI Server and the workstations.

Port Number

Program

File Name

Location

1779

STI Director

STDIRECT.EXE

Windows Directory

1780

Tabs3 Accelerator

T3ACCEL.EXE

STI Program Directory

1781

PracticeMaster Accelerator

PMACCEL.EXE

STI Program Directory

varies

STI Server

CTSRVR.EXE

STI Program Directory

The STI Server is typically configured as a program exception; however the STI Director, Tabs3 Accelerator, and PracticeMaster Accelerator can be configured as program exceptions or port exceptions.

There are many different software and hardware firewalls available. Each firewall will have different options and procedures for opening ports or adding program exceptions. If your firm uses a firewall for internal network traffic on the computer where STI Server is installed, you will need to check the firewall settings on the server to make sure the above ports and/or program exceptions are accessible. The following section includes procedures for checking the firewall setting for Windows Firewall.

Caution: If your firm uses a hardware-based firewall to connect to the Internet, it is critical that you do NOT open these ports to Internet traffic.

How to configure the Windows Firewall

By default, most programs are blocked by the Windows Firewall in an effort to keep your computer secure. If Windows Firewall is turned on, CTSRVR.EXE, T3ACCEL.EXE, PMACCEL.EXE, and STDIRECT.EXE must be listed as exceptions in order to use the STI Server program on a network. This allows that program to communicate with another computer. The steps for creating an exception differ, depending on the version of Microsoft Windows the server is running.

Using Windows XP or Windows Server 2003

To check the Windows Firewall settings

  1. From the Windows Control Panel, select Windows Firewall.
  2. The current status of Windows Firewall is listed on the General tab of the Windows Firewall window.

To add STI Server Programs as Windows Firewall Exceptions

  1. From the Windows Control Panel, select Windows Firewall.
  2. On the Exceptions tab, click the Add Program button.
  3. In the Add a Program window, click the Browse button.
  4. Browse to the Tabs3/PracticeMaster program directory, and select CTSRVR.EXE.
  5. Click Open.
  6. Click OK. CTSRVR.EXE will now be listed under Programs and Services.
  7. Repeat steps 2 through 6 for T3ACCEL.EXE and PMACCEL.EXE.
  8. Repeat steps 2 through 6 for STDIRECT.EXE; however, this file will be located in the Windows System directory (e.g., C:\WINDOWS\SYSTEM32).
  9. Click OK to close the Windows Firewall window.

To modify the scope of an STI Server Windows Firewall exception

  1. From the Windows Control Panel, select Windows Firewall.
  2. On the Exceptions tab, select CTSRVR.EXE from the Programs and Services list and click the Edit button.
  3. Click Change scope.
  4. Select My network (subnet) only, or the appropriate option.
  5. Click OK.
  6. Click OK.
  7. Repeat steps 2 through 6 for STDIRECT.EXE, T3ACCEL.EXE, and PMACCEL.EXE.
  8. Click OK to close the Windows Firewall window.

Using Windows Vista, Windows 7, or Windows Server 2008

To check the Windows Firewall settings

  1. From the Windows Control Panel, select Security or System and Security, then select Windows Firewall.
  2. The current status of Windows Firewall is listed on the General tab of the Windows Firewall window.

To add STI Server Programs as Windows Firewall Exceptions

  1. From the Windows Control Panel, select Security or System and Security, then select Windows Firewall.
  2. Click Allow a program through Windows Firewall or Allow a program or feature through Windows Firewall.
  3. Select the check box next to CTSRVR.EXE.
  4. Select the check boxes for STDIRECT.EXE, T3ACCEL.EXE and PMACCEL.EXE. 
  5. Click OK to close the Windows Firewall window.

To modify the scope of an STI Server Windows Firewall exception

  1. From the Windows Control Panel, select Security or System and Security, then select Windows Firewall.
  2. On the Exceptions tab, select CTSRVR.EXE from the Programs and Services list and click the Edit button.
  3. Click Change scope.
  4. Select My network (subnet) only, or the appropriate option.
  5. Click OK.
  6. Click OK.
  7. Repeat steps 2 through 6 for STDIRECT.EXE, T3ACCEL.EXE, and PMACCEL.EXE.
  8. Click OK to close the Windows Firewall window.

Note: If the programs are not listed on the Exceptions tab, it may be necessary to open the port for the firewall manually. Instructions for opening a port in Windows Vista Firewall can be found on the Windows Help Web site, under "Open a port in Windows Firewall."

REFERENCES

THE INFORMATION PROVIDED IN THE SOFTWARE TECHNOLOGY, INC. KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. SOFTWARE TECHNOLOGY, INC. DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL SOFTWARE TECHNOLOGY, INC. OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF SOFTWARE TECHNOLOGY, INC. OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

© 1999-2010 Software Technology, Inc.   All rights reserved. Terms of Use
The maker of Tabs3 and PracticeMaster
Tabs3, PracticeMaster, and the “pinwheel” symbol (The "Pinwheel" symbol is a Registered Trademark of Software Technology, Inc.) are registered trademarks of Software Technology, Inc.
e-Mail Suggestions for the Knowledge Base to: kb@Tabs3.com
Technical Support via e-mail is not available.
Knowledge Base:   http://support.Tabs3.com
Web Site:   http://www.Tabs3.com