topic HP SIMs "configure and repair" function through firewall in Server Management - Systems Insight Manager

HP SIMs "configure and repair" function through firewall

Viktor Hutt — Tue, 24 Mar 2009 18:27:57 GMT

Hi
I am installing SIM 5.3 in an enterprise with lots of firewalls. I have opened all the needed ports mentioned in the "Understanding HP SIM 5.3 security" doc.
I can discover a system, but cant run the "Configure And Repair" succesfully, unless I open for port 135-139 for windows systems, wich I dont want to.

Wich ports (or mechanism) is used by the "configure and repaire" to push the first settings like WBEM provider, OpenSSH, VCA agent, SMH, trust cert and so on?

It seems that either I have to have the OpenSSH installed manually first, or I must open port 135-139 on the firewalls for the first setup.

Anyone has any good tips on this?

Re: HP SIMs "configure and repair" function through firewall

David Claypool — Tue, 24 Mar 2009 20:12:10 GMT

CRA uses Windows RPC calls, so port 135 would be correct. Please keep in mind that CRA is supposed to be used as a remedy, not as a primary practice. You should integrate properly configured agents into your build process.

Re: HP SIMs "configure and repair" function through firewall

Viktor Hutt — Fri, 27 Mar 2009 22:21:41 GMT

Thanks, that was what i thought.

Funny documentation that tells about all the ports that must be opened for SIM to work, (but not mentioning port 135-139)and then brags about how easy you can use Configure and Repair to push out agents. All this without mention with a single word that you in fact can throw your firewall out the window.

:-) yeah