Firewall Requirements

Overview

The system communicates across firewall(s) using the same ports used by the CommCell(s)/QSMCells to communicate across firewall(s). Both one-way firewall and two-way firewalls are supported.

NOTES

The system uses a secure proprietary protocol for all inter-process communication on enabled ports.

Consider the following to ensure the smooth operation of the system across firewall(s).

CommNet Server

Communicating with a CommServe

If the CommNet Server is installed on a computer which has the CommServe software installed, the same firewall ports are used by both the CommServe and CommNet Server.
If the CommNet Server computer behind a firewall does not have the CommServe software, you must install the SQL Server iDataAgent. (The SQL Server iDataAgent is also required to backup the CommNet Server database to provide disaster recovery solutions for the CommNet Server.) Note the following:
- The firewall ports used by the SQL iDataAgent are also used by the CommNet Server.
- If any CommCell in the CommNet domain is configured to communicate with the CommNet Server across a firewall, the Bull Calypso Communication Service must be running on the CommNet Server computer.
- If the CommNet Server and the SQL iDataAgent are installed using two different interface names, then the CommNet Server and the SQL iDataAgent must be installed with the same interface name. For example, if the CommNet Server is installed using computer1.company.comthen the SQL iDataAgent must also be installed using computer1.company.com.

Communicating with a QSM Server

In order for the CommNet Server to communicate with a QSM Server across a firewall, the port used on the QSM Server must be allowed connection across the firewall. This port number is defined in the QSMCell GUI Server Port Number field of the Register CommCell/QSMCell dialog box.

CommNet Agent

As the CommNet Agent is installed on the CommServe computer, the firewall ports used by the CommServe software will also be used by the CommNet Agent.

If the CommNet Browser is installed as a stand-alone application, (without any other CommServe component on that computer) and if the computer is across firewall(s) from the CommNet Server, port number 8403 must be allowed connection through the firewall.

If the CommNet Browser is opened as a remote web-based application, then in addition to allowing connection for port 8403 through the firewall, ensure that the http service port, which is typically port 80, is also allowed connection in the firewall.