So we are trying to switch from WMI to WinRM protocol when performing discovery. The computer I am testing with is able to be discovered via WMI, but WinRM is failing.
I have checked everything I know to check:
- Service is running
- Firewall ports 5985 and 5986 are open (allowing ANY traffic)
- Listener is running on computer and listening properly for *
- MID Server has all devices (*) as trusted host
- Checked every security tool we have...Tenable, Secure Endpoint, Threat Locker, Sophos..nothing is showing blocks...
- Ran Port Scans which show the MID Server making it to the PC, but the PC not responding
- Ran Powershell 'Test-NetConnection' to the IP and Port and the port 5985 Fails, which is obviously an issue.
We cannot figure out what is blocking WinRM from running or blocking port 5985 from being open. Network Team and Security Team have all been involved and see nothing. I could open a ticket with ServiceNow Support, but if I can't get a "Pass" test on port 5985 with the 'Test-NetConnection', which has nothing to do with ServiceNow, then I don't see Support being able to help much.
Anybody have any ideas of what I could look at?
Please mark this response as correct and/or helpful if it assisted you with your question.
Steven
