April 29, 2010 at 2:28 pm
I have a default instance and a named instance. The default uses port 1433 and my named instance I have set to 8484. I also removed the ‘0’ from ‘TCP Dynamic Ports’ under the SQL Server Network Configuration > Protocols for SEPM (my named instance) > TCP/IP in the SQL Sever Configuration Manager – wow, that was a mouth-full. Any way, I can get to the instance via ServerName\SEPM and ServerName,8484 without the Browser Service running. However, it seems as though Symantec Endpoint Protection will not connect to my SEPM instance without the Browser Service running. Should this be the case? I was under the impression that if you do not set a static TCP port then you must run the Browser Service.
Also, I thought that keeping the Browser Service from running increases your security – the instances do not show up in a browse window. Am I right or wrong on this?
Thanks,
Dave
April 30, 2010 at 7:52 am
If you are using to connect locally to the database server then shared memory comes into play.
If you are trying to connect to a remote SQl server installation using your SSMS (or client) then browser service has to be running (and is the usual practice) on the SQL Server.
for DAC to work, browser service needs to be running too...
Browser Service presents the Clients with the Instance Name (named instance) of the SQL Servers.
Maninder
www.dbanation.com
April 30, 2010 at 12:29 pm
david.aldridge (4/29/2010)
Also, I thought that keeping the Browser Service from running increases your security – the instances do not show up in a browse window. Am I right or wrong on this?Thanks,
Dave
That is not entirely true but is mostly true. Disabling the browser service will limit the number of instances that show up from scans for SQL Server, but often times you will still see the server where it is installed. Though you will not be able to see the instances of that server.
Browser service does help to resolve Named Instances to Dynamic ports in SQL Service. It is used by the server where SQL Server is installed. Disabling it is only a piece of making the environment more secure. Along with disabling it, you would assign static ports to each instance, and you would also enable firewall rules and configure routes on the routers if necessary.
Jason...AKA CirqueDeSQLeil
_______________________________________________
I have given a name to my pain...MCM SQL Server, MVP
SQL RNNR
Posting Performance Based Questions - Gail Shaw[/url]
Learn Extended Events
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply