Want to get rid of Google Ads, click here.
+ Reply to Thread
Results 1 to 6 of 6

Thread: SM 7 with firewall?

  1. #1
    Senior Member glg's Avatar
    Join Date
    Aug 2004
    Location
    Chicago, IL, USA
    Posts
    714

    Default SM 7 with firewall?

    Anybody tried running SM 7 client outside a firewall?

    I'm trying to figure out if SM 7 works like SC 6 where it wasn't really practical to run outside a firewall due to it choosing random ports for client connections.

  2. #2
    Junior Member
    Join Date
    Mar 2006
    Posts
    8

    Default

    I have connected to SM7 on a test Linux server with a firewall turned on, but I have not yet been able to test in a more formal environment. I have also verified using netstat that when I connect to SM7, I'm connecting to a defined port (13080) instead of a random port like in 6.1.

  3. #3
    Senior Member glg's Avatar
    Join Date
    Aug 2004
    Location
    Chicago, IL, USA
    Posts
    714

    Default

    that is good news, thanks! I opened a ticket with HP on this as well. Will report back if I get anything concrete from them.

  4. #4
    Administrator tommy's Avatar
    Join Date
    Nov 2001
    Location
    Copenhagen
    Posts
    4,271

    Default

    Quote Originally Posted by glg View Post
    Anybody tried running SM 7 client outside a firewall?

    I'm trying to figure out if SM 7 works like SC 6 where it wasn't really practical to run outside a firewall due to it choosing random ports for client connections.
    I think I read somewhere in the documentation that the number of ports needed to be opened in the firewall has been drastically reduced and I believe you can choose the port range to use also.
    Best regards Tommy
    Blog - - ITIL certified - Accredited Integration Specialist – HP OpenView Service Management

    Want to keep this site alive? Consider making a donation. Click here.

  5. #5
    Senior Member glg's Avatar
    Join Date
    Aug 2004
    Location
    Chicago, IL, USA
    Posts
    714

    Default

    Okay, when I said 6, it really meant 6.0 or 6.1. Apparently 6.2 and 7 both work differently. It's a servlet implementation (appears to be tomcat's RTE). So, depending on how you scale, you just have to open a port for each servlet you have running.

  6. #6
    Senior Member benvargas's Avatar
    Join Date
    Apr 2005
    Location
    San Diego, CA USA
    Posts
    194

    Default

    As you guys have found, Service Manager no longer uses ephemeral ports range which means no more gaping holes in firewalls in order to accept Eclipse client connections. The servlet ports just need to be available.

+ Reply to Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Bookmarks

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts