UNSOLVED
Deploying Software Updates Through Firewall
I am unable to deploy software update through my firewall unless I open all TCP ports between my ITA box and the managed servers. Is there documentation on which ports need to be open to do this or is there a way to set the ports used for this.
I am using ITA 8.0 and OMSA 5.1
I am using ITA 8.0 and OMSA 5.1
Message Edited by idflyfish on 10-10-2006 05:45 PM
Clarification:
ITA can comunicate fine through the firewall when doing discovery and inventory. It is only when I try to do a software deployment that I run into an issue. The problem is the managed server is trying to open a connection to the managment server on what looks to be an ephemeral port (or at least within a broad range of ports). Since we have managed servers that sit on various DMZs as well as in remote locations, we need to be able to deploy updates in a secure manner using ITA.
Message Edited by idflyfish on 10-10-2006 05:53 PM
Message Edited by idflyfish on 10-10-2006 05:53 PM
- Thanks for the links they are helpful.I assume these ephemeral ports that are being blocked by my firewall are related to the use of RPC. Is this correct?
Can I get an explaination of how this all works so I understand what I am up against when trying to secure communication between ITA and a managed server through a firewall? DELL-JamesC
206 Posts
213
0
Posted December 2nd, 2006 00:00
the updates are remote procedure calls, RPC so DCOM.You will need to open the RPC endpoint mapper port 135 TCPthen the ports are dynamic over 1000good news is you can specify a range of ports for RPC to use, see MS KB 892500and technetMessage Edited by DELL-JamesC on 12-01-200608:23 PM
OMNavigator
291 Posts
213
0
Posted October 11th, 2006 06:00