Customizing the Data Protector Environment
Firewall Support
Chapter 11546
one DBSM will be started. For Oracle and SAP R/3 integrations,
“concurrency + 1” DBSMs will be started. The port range for the
Session Managers needs to be added to the OB2PORTRANGESPEC
variable on the CM system:
Port Range Setting
on the Cell
Manager
OB2PORTRANGESPEC=CRS:20000-20004;xSM:20100-20199
Therefore, the firewall rule for the connections to the Session
Managers is the following:
✓ Allow connections from the Application Agent system to ports
20100-20199 on the CM system
Limitations • Remote installation of clients across the firewall is not supported.
You need to install clients locally in the DMZ.
• This cell can back up clients in the DMZ, as well as clients in the
intranet. However, each group of clients must be backed up to devices
configured on clients that are on the same side of the firewall.
IMPORTANT If your firewall does not restrict connections from the intranet to the
DMZ, it is possible to back up clients in the intranet to devices
configured on clients in the DMZ. However, this is not recommended, as
the data backed up in this way becomes more vulnerable.
• If a device in the DMZ has robotics configured on a separate client,
this client must also be in the DMZ.
• This setup does not allow backup of databases or applications using
Application Agents on the clients in the DMZ.
