Firewall rules

Question / Problem

Which firewall rules are created during the installation and what are they used for

Answer / Solution

All rules marked as (Internal) are created for internal communication to specific machines. They can be further limited by e.g. configuring an IP range for which machines they should be applied (recommended for rules that are applied on public profiles).
For every rule you can find the port and program it applies to.

ExchangeServerToolbox - Archive Access Service - Program (UDP-Outbound) (Internal)
Used to access the archive on the master machine.
Program: C:\Program Files (x86)\JAM Software\Exchange Server Toolbox\bin\Jam.EST.Archive.Access.Service.exe
Port: Any

ExchangeServerToolbox - ClamAV Main Signatures Freshclam Update - Program (TCP-Outbound)
Used to update the ClamAV signatures
Program: C:\Program Files (x86)\Common Files\JAM Software\ClamAVInABox\CLamAV\freshclam.exe
Port: Any

ExchangeServerToolbox - ClamAV SaneSecurity Signatures Rsync Update - Program (TCP-Outbound)
Used to update the ClamAV SaneSecurity signatures
Program: C:\Program Files (x86)\Common Files\JAM Software\ClamAVInABox\rsync\rsync.exe
Port: Any

ExchangeServerToolbox - Distributed Active Directory Service - Port (TCP-Outbound) (Internal)
Used by master installation to distribute the active directory
Program: Any
Port: 8078

ExchangeServerToolbox - Distributed Settings Service - Port (TCP-Outbound) (Internal)
Used by master installation to distribute settings
Program: Any
Port: 8076

ExchangeServerToolbox - SpamAssassin Service - Program (UDP-Outbound)
Used by the SpamAssassin service
Program: C:\Program Files (x86)\Common Files\JAM Software\SpamAssassin\spamdService.exe
Port: Any

ExchangeServerToolbox - Archive Access Service - Port (TCP-Inbound) (Internal)
Used for clients to access the archive on this machine (TCP)
Program: Any
Port: 8074

ExchangeServerToolbox - Archive Access Service - Program (UDP-Inbound) (Internal)
Used by clients to access the archive on this machine (UDP)
Program: C:\Program Files(x86)\JAM Software\Exchange Server Toolbox\bin\Jam.EST.Archive.Access.Service.exe
Port: Any

ExchangeServerToolbox - Distributed Active Directory Service - Port (TCP-Inbound) (Internal)
Used by clients to access the active directory on this machine
Program: Any
Port: 8078

ExchangeServerToolbox - Distributed Settings Archiving Service - Program (TCP-Inbound) (Internal)
Used by master installation to recieve emails for archiving
Program:C:\Program Files(x86)\Common Files\JAM Software\Redis-EST\redis-server.exe
Port: Any

ExchangeServerToolbox - Distributed Settings Service - Port (TCP-Inbound) (Internal)
Used by clients to access this machines settings
Program: Any
Port: 8076

ExchangeServerToolbox - Main Service Utilities - Port (TCP-Inbound)
Used for communication between the processes
Program: Any
Port: 8070

ExchangeServerToolbox - SpamAssassin Service - Port (TCP-Inbound)
TCP rule for the SpamAssassin service
Program: Any
Port: 8072

ExchangeServerToolbox - SpamAssassin Service - Program (UDP-Inbound)
UDP rule for the SpamAssassin service
Program: C:\Program Files(x86)\Common Files\JAM Software\SpamAssassin\spamdService.exe
Port: Any