A Firewall Rules

This appendix lists the rules needed for communication between the various components. The values in parenthesis represent ports, with ANY meaning any ports on that component.

Web Server

Incoming:

From clients (TCP/ANY) to web server (TCP/80—HTTP)

From clients (TCP/ANY) to web server (TCP/443—HTTPS)

From blades (TCP/ANY) to web server (TCP/80—HTTP)

From admin_workstation (TCP/ANY) to web server (TCP/443—HTTPS)

From resources (UDP/47777) to web server (UDP/47777—Custom)

Outgoing:

From web server (TCP/ANY) to SQL_Server (TCP/1433—MSSQL))

From web server (TCP/ANY) to resources (TCP/139—RPC)

From web server (UDP/47777) to resources (UDP/47777—Custom)

Clients

Incoming:

None

Outgoing:

From clients (ANY) to web server (TCP/80—HTTP)

From clients (ANY) to resources (TCP/3389—RDP)

From clients (ANY) to resources (TCP/42966—RGS)

NOTE: The default RGS port is TCP/42966; however, RGS 5.3 and later allows this to be changed. Please see the RGS documentation for details.

From clients (ANY) to web server (TCP/443—HTTPS)

Resources

Incoming:

From web server (UDP/47777) to resources (UDP/47777—custom)

From web server (TCP/ANY) to resources (TCP/139—RPC)

Web Server

85