The document is archived and information here might be outdated
Plan port configurations for Groove Server
Groove Server 2010
Applies to: Groove Server 2010
Topic Last Modified: 2010-01-15
This article provides information about port settings for Groove Server 2010. Groove Server 2010 installations automatically configure Windows Firewall network ports, with the inbound port exceptions required for proper Groove Server 2010 Manager operation as noted in the table below. You can review or adjust Windows Firewall settings from the Start menu by clicking Administrative tools and selecting Windows Firewall with Advanced Security.
The following table lists the open ports required for Groove Server operation:
Port Settings for Groove Server Manager IIS server
Allowed Inbound ports
Allowed Outbound ports
Groove Server Manager
80/TCP incoming - To receive SOAP requests from SharePoint Workspace clients and Groove Server Manager administrative Web pages.
443/TCP incoming - To support Secure Socket Layer (SSL) protection of the Groove Server Manager administrative Web pages and automatic Groove account configuration.
1433/TCP outgoing – To support SQL updates on the Groove Server Manager SQL Server back-end, for sending user data to SQL databases.
25/TCP outgoing – To support SMTP Smart Host, for sending user e-mail with SharePoint Workspace account configuration or restoration codes.
8009/TCP – To support HTTP communications on Groove Server Relay, for sending relay provisioning information to Groove Server Relay.
Groove Server Relay
80/TCP incoming - To receive HTTP-encapsulated SSTP messages from SharePoint Workspace clients
2492/TCP incoming - To receive Simple Symmetric Transmission Protocol (SSTP) messages from Groove Server Relay clients and to receive SSTP Relay server-to-Relay server messages.
443/TCP incoming - To receive SSTP messages from SharePoint Workspace clients.
8009/TCP incoming – To support proprietary SOAP security and to receive HTTP/SOAP messages that contain user provisioning information from Groove Server Manager. You may want to help secure this SOAP port by binding it to a specific network adapter and allowing only Groove Server Manager access to it, as described in, Secure the Groove Server Relay installation. If Groove Server Relay and Groove Server Manager will not be communicating via the external interface, this port can be closed.
8010 /TCP incoming - To receive HTTPS administrative access to the relay server’s administrative Web pages. You may want to help secure this SSL-protected port by restricting it to a specific network adapter and allowing only administrative access to it, as described in, Secure the Groove Server Relay installation. If the Groove Server Relay will not be accessed remotely, this port can be closed.
2492/TCP outgoing - To send SSTP Relay server-to-Relay server messages.