ENS 10.6 Firewall issue - Domain Controller not replicating

[ezim]

Has anyone come across an issue where you've set up the Trellix Endpoint Security # ENS 10.6 Firewall rules for a Domain Controller and it does not replicate to the other DCs?

I'm clearly missing something as the replication works when I set an ANY to ANY rule for:
- Network: Any Protocol
- Transport: All Protocols

But I can't find what is missing.

[ktankink]

Hi @ezim You will need to identify what specific network traffic is needed to perform Active Directory replication and then create the appropriate ENS Firewall rules for that network traffic.  I would suggest starting with Microsoft's documentation regarding network port requirements.  Ref https://docs.microsoft.com/en-US/troubleshoot/windows-server/networking/service-overview-and-network....

[ezim · Accepted solution]

Hello @ktankink 

We already had all the relevant rules in place for the AD replication.

However, the new server had IPv6 switched on and we needed to configure a rule for "IPv6 encapsulation in IPv4 (under: Transport Protocol - Other).