HP SIM 6 and MS TMG

[Alexx_B]

Hello

I want to connect my DL server with MS TMG installed to my SIM server.
I have read HPSIM_Security_WP.pdf and Managing HP servers through firewalls with HP Systems Insight Manager PDF and have found TCP/UDP ports I should open.

Here are ports I open in TMG:

TMG -> SIM
TCP 2381 (Outbound*)
TCP 2301 (Outbound)
UDP 162 (send-recieve)
UDP 161 (send-recieve)

SIM -> TMG
TCP 5988 (Outbound)
TCP 5989 (Outbound)
TCP 280 (Outbound)
TCP 2301 (Outbound)
TCP 2381 (Outbound)
TCP 80 (Outbound)
TCP 443 (Outbound)
TCP 135 (Outbound)
UDP 162 (send-recieve*)
UDP 161 (send-recieve)

(*) this is TMG terminology

I can open SMH of TMG from SIM server and reverse (SMH of SIM from TMG server) but still cannot detect agent state when I try to discover or identify system

Here are log parts:

********* Significant issues and overall target
discovery/identification status:
Major: The system cannot be identified properly for HP SIM to
manage; unable to get one or more of the following: model, serial
number or unique identifier (UUID). For management processors,
verify the system is running the latest firmware. For Linux based
operating systems, you must have dmidecode installed, enable the
PermitRootLogin and PasswordAuthentication in sshd, and use root sign-in
credential. For HP-UX, verify the sign-in credential. For Windows, check
if WMIMapper is configured correctly on the CMS and verify the
sign-in credential.

Normal: System Management Homepage (SMH) is installed or is
responding on the system(s).
Minor: The Central Management System (CMS) cannot communicate with
the CIMOM locally installed on the managed system using the WBEM
protocol, Identification will try to identify Windows systems using
the WMI Mapper as proxy; for Linux and HP-UX systems, check
credentials by going to Options->Security->Credentials->System
Credentials. For Linux systems also check if the HP WBEM provider is
installed.
Normal: Got the system information from the WBEM / WMI providers and
it has a valid WBEM credential.
Minor: The system did not respond to WS-Management (WS-Man)
request.
Normal: The trust between the CMS and the managed system is
established.

At the same time agent still has an "Unknown" state