Views:

To allow the necessary NLB traffic, allow the following rules:

NameAction TypePriorityDirectionFrame TypeProtocolSource IPSource PortDestination IPDestination Port
NLB protocol 886F FrameForce Allow0 - LowestIncomingOther:886FN/AAnyN/AAnyN/A
Outgoing TCP 49154 portForce Allow0 - LowestOutgoingIPTCPAnyAnyAny49154
Incoming TCP 49155 portForce Allow0 - LowestIncomingIPTCPAnyAnyAny49155
Incoming TCP 135 PortForce Allow0 - LowestIncomingIPTCPAnyAnyAny135
Incoming UDP 5355 source portForce Allow0 - LowestIncomingIPUDPAny5355AnyAny
Incoming UDP 5355 destination portForce Allow0 - LowestIncomingIPUDPAnyAnyAny5355
 
Some necessary network protocols (e.g. DHCP, DNS, ARP, etc.) are not listed in the table above. Make sure those protocols are allowed if they are needed.
 

To monitor if there is still any NLB-related traffic being blocked, turn on the Tap mode:

  1. Go to Computer > Settings.
  2. Select the Advanced tab.
  3. On the Network Engine Mode section, choose Tap.

    TAP mode

Keywords: nlb traffic in deep security