Tips and Tricks: OpsMgr 2012 SP1- What Web Service URL, IP and Ports does the Management Pack Catalog web service call

A client was curious how to connect to the MP Catalog if the Server did not have Firewall ports opened for MP Catalog communication.

Connectivity Summary:

When performing an MP Import via the Operations Manager Console, the web services uses a certificate to Connect to https://www.microsoft.com/mpdownload/ManagementPackCatalogWebService.asmx
The Network sees an anonymous POST to the URL Above
The request is directed over port 49204 to the IP 64.4.11.42 over https using the certificate
The MP catalog is displayed

I was able to get to the Summary above by running ProcessMonitor during a call to the webservice (clicked on import MP from Catalog from Console) and saw this IP for the MP Catalog webservice (https://www.microsoft.com/mpdownload/ManagementPackCatalogWebService.asmx ):

Microsoft.EnterpriseManagement.Monitoring.Console.exe 18136 TCP Send Receive :49204 –> 64.4.11.42:https

Note: The IP found in whois sees this as a Microsoft “Hotmail” IP, but it is Microsoft nonetheless…

# The following results may also be obtained via:

# http://whois.arin.net/rest/nets;q=64.4.11.42?showDetails=true&showARIN=false&ext=netref2

NetRange: 64.4.0.0 – 64.4.63.255

CIDR: 64.4.0.0/18

OriginAS:

NetName: HOTMAIL

NetHandle: NET-64-4-0-0-1

Parent: NET-64-0-0-0-0

NetType: Direct Assignment

Comment: Abuse complaints will only be responded to if sent to

Comment: [email protected] and [email protected].

RegDate: 1999-11-24

Updated: 2006-01-23

Ref: http://whois.arin.net/rest/net/NET-64-4-0-0-1

OrgName: MS Hotmail

OrgId: MSHOTM

Address: One Microsoft Way

City: Redmond

StateProv: WA

PostalCode: 98052

Country: US

RegDate: 1999-11-24

Updated: 2004-01-14

Comment: Please contact [email protected] for all spam

Comment: issues.

Ref: http://whois.arin.net/rest/org/MSHOTM

OrgTechHandle: MSFTP-ARIN

OrgTechName: MSFT-POC

OrgTechPhone: +1-425-882-8080

OrgTechEmail: [email protected]

OrgTechRef: http://whois.arin.net/rest/poc/MSFTP-ARIN

OrgAbuseHandle: ABUSE231-ARIN

OrgAbuseName: Abuse

OrgAbusePhone: +1-425-882-8080

OrgAbuseEmail: [email protected]

OrgAbuseRef: http://whois.arin.net/rest/poc/ABUSE231-ARIN

RTechHandle: MSFTP-ARIN

RTechName: MSFT-POC

RTechPhone: +1-425-882-8080

RTechEmail: [email protected]

RTechRef: http://whois.arin.net/rest/poc/MSFTP-ARIN

# ARIN WHOIS data and services are subject to the Terms of Use

# available at: https://www.arin.net/whois_tou.html