Network/Firewall Ports that need to be opened when implementing Exchange 2010.
I also highly recommend referring to this article by Michel de Rooij, he has the best visual diagram of how the ports work within the exchange infrastructure.
Click here for his exchange network diagram.
| Role | Port | To |
| MBX | 3343 | MBX |
| MBX | 64327 | MBX |
| MBX | 135 | to HUB |
| MBX | 135 | to CAS |
| MBX | 135 | to DC, GC, DNS |
| MBX | 53 | to DC, GC, DNS |
| MBX | 88 | to DC, GC, DNS |
| MBX | 3268 | to DC, GC, DNS |
| MBX | 389 | to DC, GC, DNS |
| CAS | 80 | CAS |
| CAS | 995 | CAS |
| CAS | 993 | CAS |
| CAS | 80 | internet |
| CAS | 110 | internet |
| CAS | 143 | internet |
| CAS | 135 | to DC, GC, DNS |
| CAS | 53 | to DC, GC, DNS |
| CAS | 88 | to DC, GC, DNS |
| CAS | 3268 | to DC, GC, DNS |
| CAS | 389 | to DC, GC, DNS |
| CAS | 5075-5077 | UM |
| CAS | 5060-5062 | UM |
| HUB | 25 | to Hub |
| HUB | 135 | to MBX |
| HUB | 135 | to DC, GC, DNS |
| HUB | 53 | to DC, GC, DNS |
| HUB | 88 | to DC, GC, DNS |
| HUB | 3268 | to DC, GC, DNS |
| HUB | 389 | to DC, GC, DNS |
| HUB | 25 | to EDGE |
| HUB | 50636 | to EDGE |
| EDGE | 25 | to EDGE |
| EDGE | 25 | internet |
| EDGE | 587 | internet |
| UM (Lync) | 25 | to HUB |
| UM (Lync) | 5075-5077 | to CAS |
| UM (Lync) | 5060-5062 | to CAS |
| UM (Lync) | 135 | to DC, GC, DNS |
| UM (Lync) | 53 | to DC, GC, DNS |
| UM (Lync) | 88 | to DC, GC, DNS |
| UM (Lync) | 3268 | to DC, GC, DNS |
| UM (Lync) | 389 | to DC, GC, DNS |
