| Source | Source Ports | Protocol | Direction | Destination | Destination Ports | Notes |
|---|---|---|---|---|---|---|
| Normal Server | 445 | TCP | Bi-directional | Information Server | 445 | Named Pipe |
| Normal Server | 139 | TCP | Bi-directional | Information Server | 139 | Named Pipe |
| Normal Server | 137 & 138 | UDP | Bi-directional | Information Server | 137 & 138 | Named Pipe |
| Normal Server | Random | TCP/UDP | Bi-directional | EMC Storage Server | 445 | get file from storage |
| Normal Server | Random | TCP/UDP | Bi-directional | RPC Storage Server | 445 | get file from storage |
| Normal Server | 1344 | TCP | Bi-directional | ICAP Storage | Random | Receive ICAP scan request |
| Normal Server | 5168 | TCP | Bi-directional | Information Server | Random | listening RPC over TCP/IP from the Information Server |
| Management Console | 1000 – 1009 | TCP | Bi-directional | Information Server | Random | receive the event response message from the Information Server |
| Information Server | 5005 - 5014 | TCP | Bi-directional | Management Console | Random | receive commands from the Management Console |
| Information Server | 3000 - 3009 | UDP | Bi-directional | Management Console | Random | receive broadcast messages |
| Information Server | Random | TCP | Bi-directional | AU Server | 80/443 | IS download pattern/engine |
| Information Server | 3628 | TCP | Bi-directional | Normal Server | Random | receive event response messages |
