- Community Home
- >
- Software
- >
- HPE OneView
- >
- Re: OneView 6.30 - Firewall Destination for Softwa...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-28-2021 01:44 AM - last edited on 09-28-2021 09:56 PM by support_s
09-28-2021 01:44 AM - last edited on 09-28-2021 09:56 PM by support_s
OneView 6.30 - Firewall Destination for Software Update
There is a new feature in HPE OneView starting with version 6.30:
https://support.hpe.com/hpesc/public/docDisplay?docId=c05245290
HPE OneView User Experience Key Features
Software Update
Notification of new HPE Service Pack content —HPE OneView provides an option for users to receive notifications when a new HPE
Service Pack for ProLiant (SPP) or HPE Synergy Service Packs (SSP) is released. Within the user interface (UI), you can opt to receive
connected notifications from HPE. Additional details about the release are also included in the UI to help you make an informed decision
about updating. A direct link to the HPE portal for downloading the content is also available from within the UI.
According to the documentation "HPE Remote Support Enablement in HPE OneView 6.0" HPE OneView communicates via port 443 to api.support.hpe.com.
What destination address and port does HPE OneView need for software update?
I can't find any documentation about this.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-28-2021 06:48 AM
09-28-2021 06:48 AM
Re: OneView 6.30 - Firewall Destination for Software Update
This picture might help. HPE OneView 6.3 User Guide (which is in HTML now):
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-28-2021 09:24 AM - edited 09-28-2021 09:25 AM
09-28-2021 09:24 AM - edited 09-28-2021 09:25 AM
Re: OneView 6.30 - Firewall Destination for Software Update
Our new notification service uses the following endpoints (both via HTTPS, 443/TCP):
- app.computeupdate.cloud.hpe.com
- midway.ext.hpe.com
We are updating our end user docs to reflect these FQDN's.
I am an HPE employee
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2021 04:49 AM
09-29-2021 04:49 AM
Re: OneView 6.30 - Firewall Destination for Software Update
im glad someone already asked about this, as i was coming on the forum to ask this question.
those 2 urls' can you confirm if 443 needs opening in both directions. or is it just from OneView to those URLs
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2021 10:22 AM
09-29-2021 10:22 AM
Re: OneView 6.30 - Firewall Destination for Software Update
im glad someone already asked about this, as i was coming on the forum to ask this question.
those 2 urls' can you confirm if 443 needs opening in both directions. or is it just from OneView to those URLs
Thanks
This is outbound only. The external service does NOT initiate the connection back to the appliance(s) you have onsite behind your firewall.
I am an HPE employee
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-04-2021 05:30 AM
10-04-2021 05:30 AM
Re: OneView 6.30 - Firewall Destination for Software Update
We have released the two endpoints in our proxy.
However, I have an error message when activating them:
The problem now is that the OneView appliance does not query the domain midway.ext.hpe.com, but always does the query via the IP address (e.g. 15.241.48.251). However, this is blocked for us.
If I allow the IP address from midway.ext.hpe.com in the proxy, the connection works.
Does this new feature still have a problem with resolving the domain?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-04-2021 06:01 AM - edited 10-04-2021 06:04 AM
10-04-2021 06:01 AM - edited 10-04-2021 06:04 AM
Re: OneView 6.30 - Firewall Destination for Software Update
I am aware of ~15 addresses that midway.ext.hpe.com may resolve to. Your OneView is likely getting one of them and your firewall is getting a different one when you use the name. Maybe your firewall is only using one of the resolutions. nslookup will respond with ~15 IP addresses (and some IPv6) so it should allow all of those.
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-04-2021 06:11 AM
10-04-2021 06:11 AM
Re: OneView 6.30 - Firewall Destination for Software Update
Our firewall engineer explained it to me like this:
We have enabled the domain midway.ext.hpe.com in the proxy. However, HPE OneView queries the proxy with the IP address, e.g. 15.241.48.251 (this is one IP address of 16, which resolves midway.ext.hpe.com). However, since the IP address 15.241.48.251 is not enabled in the proxy, HPE OneView cannot reach it externally.
Why does HPE OneView request the IP address 15.241.48.251 and not the domain midway.ext.hpe.com?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-04-2021 07:02 AM - edited 10-13-2021 01:28 PM
10-04-2021 07:02 AM - edited 10-13-2021 01:28 PM
Re: OneView 6.30 - Firewall Destination for Software Update
[Any personal opinions expressed are mine, and not official statements on behalf of Hewlett Packard Enterprise]
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-04-2021 07:22 AM
10-04-2021 07:22 AM
Re: OneView 6.30 - Firewall Destination for Software Update
If HPE OneView requests the IP address from the proxy and not the domain midway.ext.hpe.com this will never work for us.
For Call Home, OneView seems to do this to others because we can do Call Home.