topic Re: SIM to manage servers behind a Firewall in Server Management - Systems Insight Manager

SIM to manage servers behind a Firewall

Andrew_271 — Tue, 04 Aug 2009 16:43:52 GMT

We have a group of about 15 servers that are behind a firewall.

We would like our HP SIM server, which is in our main intranet, be able to manage these servers.

What ports do I need to open to do so? Thanks.

Re: SIM to manage servers behind a Firewall

Daniel Leblanc — Tue, 04 Aug 2009 16:48:38 GMT

here you go
"Managing HP servers through firewalls with HP Systems Insight Manager 5.0"
ftp://ftp.compaq.com/pub/products/servers/management/hpsim/Ma
nagingHPServers-withHPSIM.pdf
and "Understanding HP Systems Insight Manager Security" http://h10018.www1.hp.com/wwsolutions/misc/hpsim-helpfiles/security5.pdf
Second document contain ports you need for HPSIM/agents.

Say THANK YOU with HP Points
Have a nice day
Dan

Re: SIM to manage servers behind a Firewall

Andrew_271 — Wed, 05 Aug 2009 12:37:56 GMT

Thank you, Daniel. I will read through the documents.

Re: SIM to manage servers behind a Firewall

Daniel Leblanc — Wed, 05 Aug 2009 12:39:40 GMT

My pleasure!

Dan

Re: SIM to manage servers behind a Firewall

Andrew_271 — Wed, 05 Aug 2009 13:57:10 GMT

One more question, and pardon my ignorance of how firewalls work exactly, as that is handled by another unit.

First off, we have our CMS (HP SIM) in our normal intranet, and the managed systems in question are in the DMZ, behind a firewall. This firewall has all ports closed in both directions until I request otherwise.

The first 4 columns in the Port listing table in document 2 shows INs and OUTs for the CMS and the Managed system.

How do I know which ones I need to open? Would all 4 columns need to be opened to make it work properly?

I see this old forum post describing which ports to open, but it does not specify which direction.
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=679140

I have HP SIM working well for our intranet, but I don't understand how it works behind the scenes enough to get it working through the firewall. Thanks.