Customizing the Data Protector Environment

Firewall Support

Port Range Setting on the Cell Manager

Limitations

IMPORTANT

one DBSM will be started. For Oracle and SAP R/3 integrations, “concurrency + 1” DBSMs will be started. The port range for the Session Managers needs to be added to the OB2PORTRANGESPEC variable on the CM system:

OB2PORTRANGESPEC=CRS:20000-20004;xSM:20100-20199

Therefore, the firewall rule for the connections to the Session Managers is the following:

Allow connections from the Application Agent system to ports 20100-20199 on the CM system

Remote installation of clients across the firewall is not supported. You need to install clients locally in the DMZ.

This cell can back up clients in the DMZ, as well as clients in the intranet. However, each group of clients must be backed up to devices configured on clients that are on the same side of the firewall.

If your firewall does not restrict connections from the intranet to the DMZ, it is possible to back up clients in the intranet to devices configured on clients in the DMZ. However, this is not recommended, as the data backed up in this way becomes more vulnerable.

If a device in the DMZ has robotics configured on a separate client, this client must also be in the DMZ.

This setup does not allow backup of databases or applications using Application Agents on the clients in the DMZ.

546

Chapter 11

Page 576
Image 576
HP B6960-90078 manual Port Range Setting on the Cell Manager Limitations, 546