Port requirements for PI AF Server

(1) Direction is in relation to the computer where the local application is running. For example, Outbound means that firewall rules for the local application node must allow traffic to leave the local application and be directed towards the remote node; Inbound means that firewall rules for the local application node must accept incoming connections from the remote node.

(2) Can be configured to use a dynamic port. By default named instances, including SQL Server Express, are configured to use dynamic ports.

(3) SQL Browser is optional. See the Microsoft article SQL Server Browser Service.

(4) Alternatively, you can also use port 139 if NetBIOS is enabled. SMB is used when the Windows user group/object picker is opened. The SMB connection directs to the node requested by the user, so this is not a hard requirement to browse users on the .

(5) Allowing outbound connections from the client through port 389 is necessary if the client is on one domain and the on a different domain. This is necessary for the client to contact the domain controller on the remote domain through the LDAP protocol.

Port requirements for base functionality