tag:blogger.com,1999:blog-28669706.post35426013604244330..comments2024-03-25T08:33:57.056+01:00Comments on Gustaf's Microsoft Dynamics CRM Blog: Finding the TCP port for Dynamic Excel ExportGustaf Westerlundhttp://www.blogger.com/profile/02522937600083440624noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-28669706.post-10274188026412654012012-03-23T14:18:03.142+01:002012-03-23T14:18:03.142+01:00@Online Cloud Backup, well, I guess it is. I discu...@Online Cloud Backup, well, I guess it is. I discussed it with a friend who is an IT expert and works some with SQL-server. His comment was that SQL Server 2008 has a lot of strange features addet to it, one thing being random ports for SQL connections. Accordning to him, it is supposed to be a setting somewhere in the SQL-server, and I wonder if it would revert back to 1433 if changed. The only reasonable explanation to it from my point of view is to reduce the attack area, and confuse potential attackers since the SQL-port is such a common entry point for attacks.Gustaf Westerlundhttps://www.blogger.com/profile/02522937600083440624noreply@blogger.comtag:blogger.com,1999:blog-28669706.post-31394694312000405422012-03-23T07:52:42.221+01:002012-03-23T07:52:42.221+01:00You can imagine the pain and iterations. I don'...You can imagine the pain and iterations. I don't really see the purpose of not declaring and documenting the ports in Install Guide. Is it related to potential exploits on those ports ? Your thoughts plzonline cloud backuphttp://www.databoostinc.com/noreply@blogger.comtag:blogger.com,1999:blog-28669706.post-71412446076171521272012-02-28T16:49:02.192+01:002012-02-28T16:49:02.192+01:00Yes, I agree it is strange this isn't document...Yes, I agree it is strange this isn't documented better. I presume the reason for changing the port between system all the time is to make it harder for hackers to find it without portscanning as it could probably be used to exploit the system with malicious SQL.<br /><br />It is a hazzle that they don't document how it works though since we need to get it to work for our customers. Why, I don't know.Gustaf Westerlundhttps://www.blogger.com/profile/02522937600083440624noreply@blogger.comtag:blogger.com,1999:blog-28669706.post-44409681250849809722012-02-28T15:56:02.418+01:002012-02-28T15:56:02.418+01:00Hi Gustaf, Nice blog !! I don't know why Micro...Hi Gustaf, Nice blog !! I don't know why Microsoft has been so mysterious about the ports that MSCRM works with. Many times, consultants like me face the wrath of the client due to this. They blame it on our incompetence. Recently I installed MSCRM for a semi-govt organization in a distributed network where the network is very secure and opening a single port requires approvals, escalations and time and loads of explanations/proofs which are unfortunately not many on the web. You can imagine the pain and iterations. I don't really see the purpose of not declaring and documenting the ports in Install Guide. Is it related to potential exploits on those ports ? Your thoughts plzAnonymoushttps://www.blogger.com/profile/02700923581075971446noreply@blogger.com