Jabber Ports and IM-Only Screen Sharing

Question

Hello Community.  We have beent esting Jabber 10.5.1 in our environment and while its very good, have found a big problem.  it seems that the IM-Only screen sharing function in Jabber uses the whole high ports range for inbound connections (49152 to 65535, TCP).  This means, to make it function with our "non Microsoft" firewall we are required to open this whole port range client to client.  From a security perspective this is a no go.  Is ther a way, as with the old video based desktop sharing, to limit the port range to a limited set of fixed ports?

Answer 1

Jabber for Windows 10.5.2 allows you to select a port range. 
Port Range for IM Screen Share
You can now define a specific port range for the client to use when usersshare theirscreen from a chat window.
If you do not configure these parameters, the client uses the default port range for IM screen share. You define
the range using the following new parameters in the Policies section of the configuration XML file:
SharePortRangeStart
Specifies the start of the port range.
SharePortRangeSize
Specifies the size of the range.
http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/jabber/Windows/10_5_2/JABW_BK_C7370E23_00_cisco-jabber-for-windows-10-5-2.pdf