SQL Server Firewall Port Monitor

I've got this annoying critical alert since weeks.
The health explorer somehow seems not to see that the ports 1433 and 4022 are open for my SCOM Server.
Even if i turn off the firewall the monitor will jump to the red little cross.
I have read that i should just ignore the critical alert and wait for a bug fix, but after a few weeks i just want a single green line of my servers.
Does anybody know how i can fix this bug or did you guys just overwrite the event?
Cheers
Quote:
The SQL Server port (default 1433) for communications with
the Configuration Manager site system roles and the provider, or the SQL Server
Service Broker port (default 4022) used for Configuration Manager replication
communications between parent and child SQL Servers, is blocked by a firewall rule on the network or server and is preventing communication using the configured ports.
A network issue may have prevented the communication over
one or both of these ports.

You can override this monitor or disable it. but also check hman.log file has no error.
You can also refer below link
http://social.technet.microsoft.com/Forums/systemcenter/en-US/e5260e71-1c76-431e-b4a2-fa0b86ba5d8c/configmgr-2012-mp-sql-port-on-firewall-not-open-even-though-it-is?forum=operationsmanagermgmtpacks
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

Similar Messages

SQL SERVER Firewall solution

Dear all
Please tell how to have a connection of SQL Server DB present in the server protected by a windows firewall with a simple JAVA application running on the client machine present within the same LAN.Its just a simple window based application being developed in java
The problem :-
Evertime i try to connect with the server database i get ther error Connection timeout error and if i put the firewall off on the server i get a good connection with the database.
Please provide solution for this prolem..please keep this in mind that firewall cannot be put off :)

Please tell how to have a connection of SQL Server
DB present in the server protected by a windows
firewall with a simple JAVA application running on
the client machine present within the same LAN.Its
just a simple window based application being
developed in javaWrite a servlet that runs inside the firewall, on the same side as the database. Port 80 is open in the firewall. Have the servlet intercede with the database on the client's behalf and send back results.
The problem :-
Evertime i try to connect with the server database i
get ther error Connection timeout error and if i put
the firewall off on the server i get a good
connection with the database.This is good. You should not want your database to be exposed to clients outside the firewall.
Please provide solution for this prolem..please keep
this in mind that firewall cannot be put off :)See above. Your client should not connect directly to the database.
%

XML Publisher Desktop Db connect SQL Server Host:Port:Sid

Brand new to XML Publisher. Set up XML Publisher Enterprise environment to work with SQL Server 2005 using both MS 2000 & 2005 JDBC drivers, so far no problem.
However the XML Publisher Desktop Report Wizard will not connect to SQL Server 2005 using either MS 2000 & 2005 JDBC drivers. I provide the same data source name, user and pw that I use in the XML Publisher Enterprise environment but it is the 4th piece of information - the database portion (Host:Port:Sid) that I am having trouble with. SID is an Oracle invention not used in the SQL Server world. I have tried various combinations of the database string without sucess.
Perhaps the XML Publisher Desktop does not work with SQL Server. Does anyone know how to use XML Publisher Desktop to create templates that will work with MS SQL Server?
Thank you.
BG...

Shaun,
Thanks for you comments. I belive I now have enough to use the HSGC-ODBC technique to make the template and then re-edit it to make it work with the original JDBC connection.
That said, "Using ODBC-JDBC bridge connection is really poor in performance." I, more than anyone on the planet am aware of this issue and more.
Being new to XMLPublisher I thought that having a JDBC connection to a SQL Server from XMLP Enterprise led me to beleive that the XMLP Desktop template creation tool would also work. "*** Pity the fool ***" for thinking that! (Thank-you Mr. T!!! <grin>).
Because I had to engage a 'heterogeneous connectivity" solution to this problem indicates that the product is half-baked. That's not to say that it is not capable.
Rushing software products to market quickly creates products that make the rest of us jump through hoops. I resent that!!! I have more import things to do than waste time!
I demand more of a trusted vendor, do you? I have tortured myself with Oracle products thinking they were ready since the early nineties.
Look we are in a "heterogeneous universe" and if the product pretends to work with "heterogeneous databases" on the Enterprise side than it damn well aught to work with them on the Desktop side. That's my opinion.
Attention OTN: I am back!!!
Justin, this needs to be fixed.
Thanks!
BG...

SQL Server 2012 AlwaysON Monitoring using SCOM

Team,
We have SCOM deployed and is serving as a monitoring solution for our SQL Estate. However I want some pointers to monitor the health of DBs within Avaialibility Group like DB Sync, log queue etc. Please direct me with the AlwaysOn health parameters that
can be monitored by SCOM.
I have confirmed with SCOM admin that we have the latest management pack installed for SQL 2012 and currently its getting monitored. However we are not seeing any alerts though.
Your inputs are highly appreciated.
Regards,
Sharath

The below link might be useful
http://blog.islamgomaa.com/?p=273
http://thoughtsonopsmgr.blogspot.com/2012/04/updated-mp-sql-server-monitoring-mp.html
--Prashanth

Can SQL Server 2012 witness monitor a 2008 R2 database.

Hi
I was wondering if it was possible for a sqlserver 201witness to monitor databases running sqlserver 2008R2. I am also curious to know about the vice versa possiblity.
Thanks

The two partners, that is the principal server and mirror server, must be running the same edition of SQL Server. The witness, if any, can run on any edition of SQL Server that supports database
mirroring.
See prerequisites section from below link:
http://msdn.microsoft.com/en-IN/library/ms366349.aspx
Please Mark This As Answer if it solved your issue
Please Mark This As Helpful if it helps to solve your issue
Thanks,
Shashikant

DS Repository with SQL Server Dynamic Ports

I have just installed Data Services 4 on our production SQL server cluster.
While our DEV SQL server runs on the standard port (1433), our prod servers use dynamic ports. I don't administer the servers and cannot change this.
Initially I was getting "java.net.connectexception: Connection Refused: Connect " errors.
After a lot of difficulty I managed to get DS to install by giving it the currently allocated dynamic port number. I had to enter a port, otherwise the 'next' button was grey out.
Everything worked, but I am concerned that once the SQL servers restarts, it will get a new port and DS will fail.
Is there a config file which stored the connection strings for the repository ? I'l like to see if its saved the port of not. Microsoft claim if no port is listed, it will get the Dynamic port automatically.
Funily enough, when I run the repository manager to set up new repositories, it makes no mention of ports. It the port only needed for the Initial software install ?
Thanks,
Leigh.

LeighK wrote:
> Funily enough, when I run the repository manager to set up new repositories, it makes no mention of ports. It the port only needed for the Initial software install ?
Port number will be asked when you try to add a repository to the management console.
Regards,
Shine

SQL Server 2012 - RESOURCE MONITOR / PREEMPTIVE_XE_CALLBACKEXECUTE high CPU usage

Hello,
We are currently in the process of migrating an existing clustered SQL Server 2008 R2 instance over to a clustered SQL Server 2012 instance as we phase out the Windows Server 2008 with SQL Server 2008 R2.
The setup is identical for the SQL Server 2012 instance as it is on the SQL Server 2008 R2 instance. (meaning the RAM and CPU are both the same or better on the SQL Server 2012 instance)
The process in which we are migrating is that we're moving a few databases over to the new SQL Server 2012 instance each night. What we've noticed is that the CPU usage is much higher on the SQL Server 2012 instance than on the previous
SQL Server 2008 R2 instance even though the there is only 1/2 of the databases migrated to the 2012 instance.
Running the following script:
;with cte ([totalCPU]) as (select sum(cpu) from master.dbo.sysprocesses)
select
tblSysprocess.spid
, tblSysprocess.cpu
, CONVERT(BIGINT,(tblSysprocess.cpu * CONVERT(BIGINT,100))) / CONVERT(BIGINT, cte.totalCPU) as [percentileCPU]
, tblSysprocess.physical_io
, tblSysprocess.memusage
, tblSysprocess.cmd
, tblSysProcess.lastwaittype
from master.dbo.sysprocesses tblSysprocess
cross apply cte
order by tblSysprocess.cpu desc
Produces the following results:
In a clustered environment, is this normal and if not, does anyone know what this means or how to reduce the CPU usage?
Thanks.

Hello,
The following query may help us identify extended events or audit configurations running on that SQL Server server that are producing that high CPU usage scenario.
SELECT
s.name
AS 'Sessions'
FROM
sys.server_event_sessions
AS s
WHERE
s.name
<> 'system_health'
and s.name
<> 'AlwaysOn_health';
Hope this helps.
Regards,
Alberto Morillo
SQLCoffee.com

Java KVM Server Firewall port

Hello Engineers,
I am in the process of deploying UCSM and having issues with connection to the KVM Console server on all my blades in the chassis. Can you please let me know all the specific tcp port needed so I can allow connections to the console of the blade.
Thanks,
Jay Singh

Thanks for the help...
Jay

Server to server firewall ports?

Hello everyone,
I have the odd task of putting some OES2 servers running NCP inside of a DMZ network. I need to know if there is known documentation of which services the servers need to have open in order to communicate with eachother.
I'm guessing:
LDAP & LDAPs (tcp 389 & 636)
NCP (tcp & UDP 524)
SLP (udp 427)
NTP (udp 123)
anything else?
Thankyou

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Depends on what you're using. SLP requires 427 but if you're not using it
then no. NTP's 123 is only needed inter-server if they are pointed to
eachother but otherwise they usually just point to some router or the
outside world. LDAP(S) isn't going to be needed for eDir communication
but things like LUM and some contextless login things will use LDAP.
What else depends on what's on the box. iManager? iMonitor? They will
all have their own parts.
Good luck.
On 11/22/2010 05:06 PM, brianrbenson wrote:
>
> Hello everyone,
>
> I have the odd task of putting some OES2 servers running NCP inside of
> a DMZ network. I need to know if there is known documentation of which
> services the servers need to have open in order to communicate with
> eachother.
>
> I'm guessing:
> LDAP & LDAPs (tcp 389 & 636)
> NCP (tcp & UDP 524)
> SLP (udp 427)
> NTP (udp 123)
>
> anything else?
>
> Thankyou
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iQIcBAEBAgAGBQJM6xj+AAoJEF+XTK08PnB50o8P/10hC9DvViXOrzdkmYUFtPUE
yRqHATJDMD+VaMUUpxTUIXDD/pj4iSiPilNBZottyntCqB80eZC3mKLTXCsPQ02z
P9RinXWjx2Zd05tgGXwetASSdHbgSeElBUmIOkswnIQ8PLFga7 tTSfJcpuEDE1/9
nQpqh6cFl1TbTaYlsnOwMUvFaY/EA7Rhv9bod6+Tg9aZUx6bFmHdO/zH+eEDThgk
Lu7kFYJk6WHHqh9s10qJKY0FUberEfME+tVFjsOgcz5QDORVy5 r6RUWmnhXlcf0V
YS8fjo0w5hsaLsLk1mLz6/lDD7bMIHMK4n6CxjUn87TTMpDvyWrIF3tSiR/rNjLi
t5d8HGwInhWEwJy95vAe+vaGj7T5PQcEsyTVgoc57M73nA/InR4o9gA8oyT1FKRx
9CAuUDduGxBtFI6y/v5EBl31YXqw294nRA4N1vTUe/FNqjb86A5kYpUsja13qsIs
zgYr50+l+XJ8eVt1wAfFLoFUUFHbFalGZdD0rigRk3QVQ2Ruaa bEmzj8fqK3Ksy6
FKGXDOGtoREwGP3Nu5p7vXx6/p3yRef06uvinZIcSDDuHs2FvCqH33tMMl8SXYK+
m/9r4iTLLbx6AO5vbo7Jcipfeph5kpmz9MZI5apyBma/jXuLOZyyCLuSQ2RXUg55
WdH6RefYmBfxLI4mQSW8
=EJD1
-----END PGP SIGNATURE-----

Hierarchy monitoring detected that the ConfigMgr SQL Server ports 1433,4022, are not active on Firewall exception

SMS_HIERARCHY_MANAGER reports (Message ID=3353):
"Hierarchy Monitoring detected that the ConfigMgr SQL Server <fqdn> ports 1433,4022, are not active on Firewall
exception."
This is a fresh SCCM 2012 environment with no firewall active. SQL is installed on the same server as SCCM 2012. Is there a way to fix this without enabling the firewall?

Check this out
Issue:
ConfigMgr logs the error even though Windows Firewall is disabled or it is enabled and all exceptions are added to SQL Server(s).
Environment: I had an environment consist of a two node SQL Cluster hosting ConfigMgr database and a separate ConfigMgr primary site server
Resolution:
Windows firewall service must be started on both SQL nodes and ConfigMgr itself . As soon as the service is started exceptions for TCP 1433 and 4022 must be added to SQL nodes firewall.
After that the firewall profiles can be disabled using:
netsh advf set allp state off
This is true but if you disable the firewall even thought you have opened the Firewall port then disabled the firewall. The status message will continue to be generated and your site server will still be in an error state.
Notice that I said "disabled" and not "turn off".
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

Pre-Requisite Check SQL Server 2012 SP2 TCP Port Enabled Error

When doing the pre-requisite check to install SCCM (CAS) using an instance of SQL Server 2012 SP2, you get the following error even though SQL Server TCP port has been enabled, set to static port 4022 on the IP addresses in use in SQL Server Configuration
Manager under Protocols for <SQLInstanceName>: configuration manager primary site and central administration site require sql server tcp enables and set to static port
To resolve this issue, make sure "4022" is also set in the IPAll node in SQL Server Configuration Manager under Protocols for <SQLInstanceName> then restart the SQL Service and re-run the pre-requisite check and you should be good to go.
To avoid SCCM SQL-related install failure, keep in mind that SCCM SQL Service Broker (SSB) (used to replicate data between database sites) is set to port 4022 by default. This is different from and cannot be same as the tcp static port set in SQL Server
Configuration Manager under Protocols for <SQLInstanceName>. For example SSB can use its default tcp port 4022 while a static tcp port of 4023 can be set in SQL Server Configuration Manager under Protocols for <SQLInstanceName> or vice-versa. The
SCCM SSB port number can be adjusted during SCCM installation on the Database Information page. My take it so change SSB port to 4023 and leave SQL default port at 4022 since SQL serves potentially many apps while SSB is used within/by SCCM.
If you are getting errors relating to SQL Server service running accounts, SQL Server Collation, and/or SQL Server sysadmin rights while attempting to install a primary site, unselect the SCCM installation option to install default settings at the beginning
of the install process.
Also, ensure to install important updates and restart the server.

Thank you for sharing.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCOM 2012 SP1 SQL Server 2008 R2 Clustering Monitoring?

We have a new print management system that was setup using SQL server 2008 R2 clustering. Right now we have SQL MP (monitoring)(discover) 6.3.173.1. They had a failover occur a week ago and SCOM didnt throw any alerts. As a temporary
fix, I found some correlated events and setup a monitor for those events on the servers. However, the system owner wants to know if there is a MP that will monitor for a SQL cluster failover event. I have looked and looked and cant seem to find
anything that gives a whole lot of detail on this.
Thanks
EFD
Warm Fuzzies!

Yes, you can monitor SQL Cluster 2008 using SCOM 2012 SP1. but you need to install SQL MP and Windows Cluster MP and Enable proxy Agent on physical nodes.
You can refer below link {it's same for SCOM 2012}
http://blogs.technet.com/b/birojitn/archive/2010/04/14/sql-server-2008-cluster-monitoring.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

JDBC drivers for SQL Server 2008 and PI7.0

HI,
I have deployed the JDBC drivers (sqljdbc.jar and sqljdbc4.jar) available for the SQL Server 2008 from the microsoft website as described in the how to document for deploying and configuring JDBC and JMS adapters.
I am running a JDBC to FIle(XML) scenario. When I go and see on the RWB CC monitoring, I get this error
Error during database connection to the database URL 'jdbc:sqlserver://hostname:1433;databaseName=123_Nagasatya' using the JDBC driver 'com.microsoft.sqlserver.jdbc.SQLServerDriver': 'com.sap.aii.adapter.jdbc.sql.DriverManagerException: Cannot establish connection to URL 'jdbc:sqlserver://hostname:1433;databaseName=123_Nagasatya': UnsupportedClassVersionError: com/microsoft/sqlserver/jdbc/SQLServerDriver (Unsupported major.minor version 50.0)'
WRT to the SQL server the port 1433 is open on the host and there is no firewall on the PI server as well as the SQL Server. Both are on different machines.Any help would be greatly appreciated.
Regards.

Hi Sujan,
This is the link.
[JDBC|http://www.microsoft.com/downloads/details.aspx?familyid=c47053eb-3b64-4794-950d-81e1ec91c1ba&displaylang=en]
or
You can also use the one on the market place.
Go to http://service.sap.com/msplatforms -> SQL Server
get zip-file sqljdbc_12_hotfix.zip contains the sqljdbc.jar file.
It should work.
Please let me know if you have any questions.
Regards.

A network-related or instance-specific error occurred while establishing a connection to SQL Server.

Dear all,
I know that this topic may be a bit old school; but it really make me mad as I tried all solutions i found and it still cant be resolved....please give a hand...
The situation is like this,my company divided different platform as a status of project, like DEV, SIT and UAT. I got a project that require me to upgrade an vs2003 project to vs2005. I upgraded it completely and
successfully, it works fine in development and UAT platform; EXCEPT, the SIT platform.
The situation is very strange that, once I move the source to SIT, it return the following error:
A network-related or instance-specific error occurred while establishing a connection to SQL Server. The server was not found or was not accessible. Verify that the instance name is correct and that SQL Server is configured to allow remote connections.
(provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified)
but it never happen in either DEV or UAT platform and even do I copy the workable web.config from DEV or UAT platform to SIT, the error still here and unable to resolve it.
I search a lot in the internet by Google, but solution suggested are not suitable or fail in my case. Most answer suggest that "enable remote control", "check fire wall", "check server" etc......But as I can connect well the
DBServer in DEV and UAT properly, I dont think those are the cause(but still, I check them all, and all are enabled properly, except my firewall setting is OFF, so adding port is ignored).
After all the searching and testing, I believed and have reason to believe that, the cause is inside my web.config:
<appSettings>


<clear/>
<add key="Environment" value="UAT v1.31"/>
<add key="DBServer" value="DB_UAT"/>
<add key="cnBPSS.ConnectionString" value="data source=DB_UAT\BPSS;persist security info=True;user id=theloginid;workstation id=RP_UAT;packet size=4096;pwd=theloginpwd"/>
<add key="UTBPSSConn.ConnectionString" value="data source=DB_UAT\BPSS;persist security info=False;user id=theloginid;workstation id=RP_UAT;packet size=4096;pwd=theloginpwd"/>
<add key="UTDSBDBConn.ConnectionString" value="workstation id=RP_UAT;packet size=4096;user id=theloginid;data source=DB_UAT\DSBDB;persist security info=False;password=theloginpwd"/>
<add key="cnDSBDB.ConnectionString" value="workstation id=RP_UAT;packet size=4096;user id=theloginid;data source=DB_UAT\DSBDB;persist security info=False;password=theloginpwd"/>
<add key="Timer1.Enabled" value="True"/>
<add key="Timer1.AutoReset" value="True"/>
<add key="cnbpss.ConnectionString" value="data source=DB_UAT\BPSS;password=theloginpwd;persist security info=True;user id=theloginid;workstation id=RP_UAT;packet size=4096"/>
<add key="cnbpss1.ConnectionString" value="data source=DB_UAT\BPSS;password=theloginpwd;persist security info=True;user id=theloginid;workstation id=RP_UAT;packet size=4096"/>
</appSettings>
</configuration>
I know such kind of setting is old school; But due to this program runs for few years from tons of ppl...I dont dare to modify it unless I am very sure they are the cause.....
May I ask if anyone cna give me some advice and help in this issue please? I already tried for weeks and turning mad....Please I really need some help...
Many thanks.
Ksun Chan

Checklist of possible reason of this error
1. Check SQL services are running
2. Check SQL Browser service is running
3. Check remote connections are enabled
4. Network connectivity between database & application servers by TRACERT command
5. Check TCP/IP protocol enabled at SQL server
6. Check talent connectivity – telnet <IP address> <port no on SQL server running>
7. Check UDP port 1434 is open or not on SQL Server
8. Check firewall is running or not Check
9. If firewall running, SQL Server & UDP port must be added in exception in firewall
Regards,
Rohit Garg
(My Blog)
This posting is provided with no warranties and confers no rights.
Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

Report Services Install - SQL Server 2012 instance blank

I have looked at all the links and tried the suggestions and I am still having the problem:
SCCM 2012 R2 SQL 2012 SP1 SSRS installed and configured (separate boxes)
When I try to add the reporting services role, it finds the SCCM database and verifies connectivity to it, the SSRS instance drop down is blank.
Using a domain service accout with local admin rights on both machines and sa rights in SQL.
There is a firewall between the Primary Server and the SQL Server and ports 80, 135, 443, 445, 1433 and the high RPC range.
Does anyone know how it is determining the instance? I have read it is via WMI but I am not sure if it is a query or executing a method. I have verified the svc acct has the correct DCOM privs.

Hi Jo75,
According to my understanding, you get the error message “Unable to connect to the database: Network error IOException: Connection refused: connect” when you connect to the SQL Server database
during installation of Trend Micro's DSM.
Based on my test, I was able to connect to the SQL Server database with the user name “sa” during the installation of Deep Security Manager and no error message appeared. Besides, I created
a new SQL Server login and it also worked fine.
Make sure you can connect to the SQL Server instance successfully, you can follow these steps:
1. Open SQL Server Management Studio and click Database Engine from pull-down menu of Connect in Object Explorer.
2. In the Server name box, you should type hostname\instance name. And you should choose SQL Server Authentication in Authentication box and type “sa” in Login box, then type your password
and click Connect.
If you can’t connect to SQL Server, you can try to create a new login and give it full permission. Please follow these steps:
1. Open SQL Server Management Studio and connect to SQL Server with administrator account.
2. Click Security and right click Logins then choose New Login.
3. In General page, type your new Login name and choose SQL Server Authentication, then set your password.
4. Click Server Roles
at
the
top-left
corner
and check the dbcreator box.
5. Click Status at the top-left corner and check enabled under the login, then click ok.
6. Click the database you want to connect during the installation of Deep Security Manager, expand the security and right click the users, then choose New User.
7. Type your user name and login name in General page. Click Owned Schemas page and check db_owner. Also check db_owner in Membership page then click ok.
8. Retry install Deep Security Manager.
Please follow these steps and how it works.
Best regards,
Qiuyun Yu

SQL Server Firewall Port Monitor

Similar Messages

Maybe you are looking for