Endpoint Protection

I am looking for your expert advice on blocking port 135 and 445 in our corporate environment on servers i.e 2008,2012,2003

What are the functionalities we will loose if we disable these ports on servers?

what are the best practices on these ports ?

regards

 

You would lose file sharing and c$ type access. MS has an article on it: https://support.microsoft.com/en-us/help/3185535/guidelines-for-blocking-specific-firewall-ports-to-prevent-smb-traffic-from-leaving-the-corporate-environment

to top what brain said, you need them be able to deploy SEP clients via SEPM.