What ports to open in our firewall

[Morten Holst]

Hello

I need som help regarding what ports to open in our firewall.
We have a two mom management servers separated by a firewall.
One managemnt server in a internal sone and another in a secure sone.
The Mom agents in the internal sone uses the management server in the sone
and the agents in the secure sone uses the management server there.
All the computers are in the same domain and trusted.
I whant the two management server to communicate with each other and when i
make a change to a rule in one management server i whant the other server to
pick up the changes.
I also whant the mom agents to communicate with both the mom management
servers for redundancy.

[Kelly Morris [MSFT]]

Good Morning,
Server-Agent communication takes place over port 1270 TCP, with heart
beats going over UDP. The MOM Security Guide will have more information,
http://www.microsoft.com/mom/techinfo/productdoc/default.mspx. Also, check
out chapter 7 of the deployment guide. It details deploying MOM in advanced
environments. I hope this helps.
--
Kelly Morris [MSFT]

This post is provided "AS IS" with no warranties, and confers no rights.

Post by Morten Holst
Hello
I need som help regarding what ports to open in our firewall.
We have a two mom management servers separated by a firewall.
One managemnt server in a internal sone and another in a secure sone.
The Mom agents in the internal sone uses the management server in the sone
and the agents in the secure sone uses the management server there.
All the computers are in the same domain and trusted.
I whant the two management server to communicate with each other and when i
make a change to a rule in one management server i whant the other server to
pick up the changes.
I also whant the mom agents to communicate with both the mom management
servers for redundancy.
--
Morten Holst

[Arie de Haan]

Post by Morten Holst
Hello
I need som help regarding what ports to open in our firewall.
We have a two mom management servers separated by a firewall.
One managemnt server in a internal sone and another in a secure sone.
The Mom agents in the internal sone uses the management server in the sone
and the agents in the secure sone uses the management server there.
All the computers are in the same domain and trusted.
I whant the two management server to communicate with each other and when i
make a change to a rule in one management server i whant the other server to
pick up the changes.
I also whant the mom agents to communicate with both the mom management
servers for redundancy.

You're configuration is security wise not the best choice in my opinion.
To have domain members in the DMZ is not a really good idea you need to
open a lot of ports. and this results in a back-end firewall which will
not do a lot. So consider a redesign