# How do I deploy an exception for a port for the desktop-sharing system called Virtual Network Computing (VNC)?

Last Updated On: 17 Sep 2026

## Description

This document provides you with steps required to deploy an exception for a port for VNC. For example, port 5900.

## Steps

To deploy an exception for a VNC port, follow the steps given below:

1. Click the **Configurations** tab.
2. Click **Configuration**.
3. In the **Computer Configurations** section, select **Firewall**.
4. Enter a name and description for the configuration.
5. In the **Firewall Action** section, select **Don't Modify**.
6. In the **Firewall Configuration** section, click **Customize**.
7. In the Customize Firewall Ports window, in the **Add to Selected Ports** section, enter the following information:
   - Port Name: VNC Port
   - Port: 5900
   - Protocol: TCP
8. Click **Add**.
9. Close the **Customize Firewall Ports** window.
10. In the Firewall Configuration section, enter the following information:
    - Port Action: Unblock
    - Choose Port: 5900 - VNC - TCP

    **Note:** This should be in the Number - Name - Protocol format.
11. Choose a target.
12. Configure the execution settings as required.
13. Click **Deploy**.

You have deployed an exception for VNC port number 5900. The settings will reflect in the client computers during the agent's 90-minute refresh cycle, during startup or during logon—whichever takes place earlier.