Data collections and Firewalls

[Dennis Bragg]

I have CIM 7.1.1 running and I have a netowrk that is heavily secured by firewalls and the network is also subnetted. I have snmp traffic open on all the Firewalls and the CIM can see other servers on the other netowrks, but the data collection is not working. What else besides the snmp ports do I need to open?

[J._1]

From Compaq's CIM Security document:

Appendix A ??? Listing of Ports
The following TCP/UDP ports are used by the Compaq Insight Manager 7 solution.

???7 for ping
???161 and 162 for SNMP
???2301 (HTTP) and 2381 (SSL) to talk to Compaq Web-enabled devices
???280 (HTTP) and 50000 (SSL) for Compaq Insight Manager 7 itself.
???80 (HTTP) and 443 (SSL) to communicate with Web servers of all types, including those in the Compaq Remote Insight Board and the Integrated Lights-Out product.

The exact udp/tcp ports used by DMI are dynamic and vary from system to system, but tend to be around 32780 and higher.

Note: It is not recommended that you enable management protocols such as SNMP or DMI on systems outside your firewall or directly connected to the Internet.