Users are complaining that they can’t map file shares, e.g. \\a.b.c.d\e$ on remote machines (both the source and dest. hosts are using Windows XP). I’m pretty certain that I have to open up the NETBIOS ports TCP 137, 138 and 139 as well as TCP 445. Do I need to open up the equivalent UDP ports as well? Do I need to open any other unique ports?
More importantly, I seem to remember hearing that XP uses random dynamic ports above 1024 when opening file shares. If this is true, is there a port keyword on the ASA (like smtp, www etc) that encompasses all the necessary ports or do I have to make my own service object-group with all the above ports?
