The following guide details the process to allow Self Enrolment communications through the Windows Firewall of a system that is hosting an Enterprise Server. 

Please Note: This process is only required if you are using the Self Enrolment facility.  For more information on this feature please see this article: KB421 - DESlock+ Self Enrolment 

The steps described are for the software firewall provided with Windows Server 2012 R2.  Steps may vary on other editions of Windows.  You may need to make similar changes to hardware firewalls if present to allow communications.

There are two methods to allow the communications, either by application or directly by port only one of the methods needs to be used.

Application Exclusion

• Press the Windows Key.
• Click the Control Panel tile.
• Click System and Security.

• Click Allow an app through the Windows Firewall.

• Click Allow another app...

• Click Browse.

• Browse to C:\Program Files (x86)\DESlock+ Enterprise Server and select dlpecsrv.exe then click Open.  (omit (x86) if using 32bit Windows).
• Click Network types...
• Select the Domain network only then click OK.

• Click the Add button.
• The DESlock+ Enterprise Console Service will be listed, click the OK button.

Port Exclusion

• Press the Windows Key.
• Click the Control Panel tile.
• Click System and Security.

• Click Windows Firewall.

• Click Advanced Settings.

• Select Inbound Rules.

• Click New Rule... from the right hand side Actions bar.

• Select Port and click Next.

• Select TCP, enter port 8266 into the Specific local ports setting then click Next.  Note: This assumes you have not modified the default port used by the Enterprise Server.

• Select Allow the connection then click Next.

• Select Only the Domain checkbox then click Next.

• Enter a name for the rule then click Finish.

• Repeat the process above but instead select UDP as the type.

Keywords: firewall, esdirect, enrolment