Access Management Services Knowledgebase

• DoIT
• UW
• MyUW
• PEOPLE

Active Directory - Firewall and Network Information

Firewalls should be configured to allow traffic from the Campus Active Directory domain controllers.

Domain Controller Information

The Campus Active directory has two domains: ad.wisc.edu and adtest.wisc.edu. Each domain has three domain controllers. The domain controller IP addresses for each domain are:

Common Ports Used by Active Directory

Active Directory makes use of several ports, so it is easier to allow all traffic from the domain controllers, which should not pose a significant security risk (especially considering that the service can only be accessed via the campus network). However, if you want to restrict communication to specific ports, here is a list of commonly used ports in Active Directory: Active Directory Replication over Firewalls. Please note that this article describes replication, which is an internal system process. Client communication with the domain controller may not make use of all ports listed in the article.

Network Connectivity

The Campus Active Directory service can only be accessed within the campus network or the WiscVPN service. Exceptions to this rule cannot be made.