A.05.70 HP Insight Remote Support Advanced and Remote Device Access Security Overview (October 2011, 5900-1735)

event and data collections from XP Continuous Track (C-Track) on the XP Service Processor (SVP). XP
AIM performs the following functions:
• Proactively informs remote HP support personnel about potential XP issues by sending them
incident/event data for analysis.
• Transfers array enhanced configuration files and configuration change event bundles for remote
HP support personnel access, whenever the a configuration change is detected.
The SVP sends event information on to the HP SIM CMS using HTTPS on TCP port 50000. The information
is deposited in a temporary directory on the CMS that is monitored by the XP AIM module. The XP AIM
module will forward the information to the Remote Support Client for transmission to the HP Remote
Support Data Center. HP Remote Access to the SVP is done via the Remote Desktop Protocol on TCP
port 3389 or pcAnywhere on TCP port 5631. The SVP runs either Windows 7, Windows Vista or
Windows XP.
• Remote Support Network Component
Remote Support Network Component (RSNC) is a network discovery and inventory software package
that provides information for all the devices located on a network. It does not require the deployment
of proprietary agents. Discovery is performed by probing network devices on the host’s subnet. Note
that Remote Support Network Component may trigger alarms on network intrusion detection systems.
The CMS must have access to the following ports for Remote Support Network Component detection
to work:
Remote Support Network Component
Port Usage
NotesProtocolPortIP Protocol
n/an/aICMP
SSH22TCP
Telnet23TCP
HTTP80TCP
epmap135TCP
NetBIOS139TCP
NetBIOS445TCP
The Windows NetBIOS RPC mechanism negotiates ports in this
range via TCP port 135 (epmap).
1024-65535TCP
TFTP69UDP
NetBIOS137UDP
NetBIOS138UDP
SNMP161UDP
SNMP TRAP162UDP
• Multivendor and Application Adapter (MVAA)
HP Multivendor and Application Adapter (MVAA) synchronizes incidents between HP Services and a
customer’s HP OpenView Operations (OVO) Management Server. Communication between the CMS
and OVO use the HTTPS (SSL/TLS) protocol over TCP port 443 and TCP port 8444 for Windows and
UNIX OVO Management Servers, respectively.
• Unreachable Device Notification (UDN)
Unreachable Device Notification (UDN) performs reachability monitoring of Insight Remote Support
Advanced managed devices and provides notifications of unreachable managed systems to HP Support
Center and appropriate personnel at the customer site. UDN first attempts to verify reachability using
SNMP from the CMS to devices. If there is no response, UDN will make ICMP echo requests in attempt
30 HP Insight Remote Support Advanced