As per DSM QRadar supports SMTP, OWA and MSGTRK types of logs integration with MS Exchange. This integration need below ports to be enabled between QRadar and Exchange Server.
TCP port 13 for Microsoft Endpoint Mapper.
UDP port 137 for NetBIOS name service.
UDP port 138 for NetBIOS datagram service.
TCP port 139 for NetBIOS session service.
TCP port 445 for Microsoft Directory Services to transfer files across a Windows share.
I need to know why these multiple ports are required? What are the purposes of each in MS Exchange Integration?