Graco 309504E Software Firewalls, Windows XP Security, Special Considerations for Firewalls

Note the button in the middle of the Google toolbar that shows 31 blocked (circled in FIG. 5); this is a count of how many pop-ups the Google toolbar has stopped from appearing. Click this button to make the toolbar allow pop-ups from the address currently in the address bar. Close the browser window and try launching Matrix via the Matrix client desktop icon again.

The same series of steps is performed for multiple-PC systems, only the address used is different--the address of the Matrix server is used instead of 127.0.0.1.

Pop-up blockers are not limited to those included with browser toolbars. Security products such as Norton Internet Security also block pop-ups; refer to the ven- dor’s instructions on how to configure these software programs.

Software Firewalls

Special Considerations for Firewalls

Summary: Any firewalls in use must allow TCP traffic on ports 8080-8082 and 3306 at the Matrix Server and port 8082 at each Matrix Client. Matrix will not function prop- erly if any of these ports are blocked. Windows XP has a built-in firewall, which is turned on by default (meaning that these ports are blocked) in Service Pack 2.

Any firewalls on the Matrix PC must allow network traffic over several ports. PCs communicate with each other via IP addresses and port numbers. An IP address can be compared to the street address of an apartment building, with a port number as a specific apartment number in the building. The Matrix server and Matrix cli- ents require certain ports be available/open in order to communicate properly. These are the default TCP ports required by the server and each client:

Matrix server:

Port 3306 - Matrix Database

Port 8080 - Matrix Web Server

Port 8081 - Matrix Server

Matrix Client:

Port 8082 - Matrix Client

Communication to these ports can be blocked by firewall software installed on your computer. Windows XP con- tains the Windows Firewall, but there are numerous products provided by third parties such as Symantec and McAfee that also provide firewall functionality. What this means for Matrix is that any Firewalls) on the Matrix PC must be either configured to allow traffic over these ports or turned off altogether.

System Requirements

The Matrix setup program offers to open these ports for you in the Windows Firewall. It does not do this for other firewall products.

Network traffic over these ports can also be blocked by what is called a proxy server. Whether or not a network has a proxy server that stops traffic on these ports, port 8080 in particular, is a question for the facility IT person- nel.

The ports listed above are the defaults. If they are changed for any reason, corresponding changes must be made in the firewall settings to allow traffic over the new port numbers. Changing the port numbers may be necessary if, for example, another application is already using these port numbers. Graco strongly recommends that IT personnel familiar with the network are involved with this configuration change.

Windows XP Security

The following security-related configuration settings are not required but are recommended for all Matrix PCs:

1.Be sure a user name and password are required to access the operating system.

2.Ensure the password-protected screensaver is enabled and set to automatically activate after 15-30 minutes of system inactivity.

3.Change user passwords on a regular basis and choose passwords that are difficult to guess.

4.Use anti-virus software to protect against viruses. Some anti-virus programs are bundled with other security software, including other security tools such as pop-up blockers and firewalls. Take note of the recommendations in the sections titled Special Considerations for Pop-up Blockers on page 4 and Special Considerations for Firewalls on page 6.

5.Be sure the system is kept up to date with Microsoft XP updates and service packs.

6.Use a firewall. As mentioned in the section titled Special Considerations for Firewalls, take care to allow for continued operation of Matrix by not block- ing the network ports Matrix needs to use.

6 309504E