Windows Server 2008 Firewall settins and PSP

[Randy McRae]

We have installed Insight Manager 5.2 and now we are installing PSP 8.1, but there seems to be a problem with getting PSP to work with the Windows 2008 firewall on. It works fine with the firewall turned off. Basically, with the firewall on, not all features of the PSP 8.1 will work properly, if at all. Anyone experienced this issue?

[Michael Garner_1]

Randy,
Basically what you are seeing is the default blocking of file and print services connections with the Windows Server 2008 firewall. I assume you are trying to use the PSP feature for remotely deploying the PSP. The deployment tool, HP SUM, uses the file and print services connections to the ADMIN$ share on the target server to send the files over and execute the PSP components. Since Windows Server 2008 blocks this by default, this prevents the PSP from connecting.

To resolve this issue, you'll need to do the following either by scripting it or by manually making the necessary changes in the firewall. Note, it is not necessary to disable the firewall to get the PSP to work.

1) Choose Start/Control Panel/Windows Firewall option.
2) Click on Change Settings
3) Click on the Exceptions tab
4) Check the box beside "File and Print Sharing" to enable this exception.
5) Click Apply, then OK.
6) Close all your windows that were opened.
7) Now you can remotely deploy the PSP to this server and still maintain your firewall.

This normally happens on servers where File and Print Services has not been enabled during installation (ie the role has not been chosen for the server). Because of Windows Server 2008's advanced security features, if the File and Print Services role is not chosen, all access to these services is blocked, even for applications with Administrator access such as the PSP.

Regards,
Michael Garner
HP SUM/PSP Architect

[Randy McRae]

I gave that a try, however, it didn't help. One of the features of Insight manager, that doesn't work with the firewall on, is utilization statistics under the Performance/Utilization tab for the server. It will indicate that it is loading and will then list the info as Not Available. See attachment. Thanks for the quick response.