7.0.8 Insight Remote Support Security White Paper

37
B.6 OpenVMS Integrity Monitored Systems
Table B.6 OpenVMS Integrity Connectivity - Firewall/Port Requirements
Protocol
Ports
Source
Destination
Function
Configurable
Optional
TCP
5989
Hosting Device
Monitored
Systems
Secured WBEM CI-MOM protocol over
HTTPS/SOAP. This port is used to
communicate with WBEM end point nodes.
Yes
Required
TCP
7920
Hosting Device
Monitored
Systems
The Insight-RS ELMC (formerly WCCProxy)
process communicates with the Director on
this port. This is a proprietary protocol. Any
connections that exchange username and
passwords use SSL. Not all connections are
SSL.
No
Required
TCP
7905
Monitored
Systems
Hosting Device
Secure HTTP (HTTPS) port used by the
listener running in the Director's Web
Interface. The monitored host connects to
the Hosting Device on this port (e.g.
https://target.sys.name.here:7905)
No
Required
ICMP
N/A
Hosting Device
Monitored
Systems
Provides system reachability (ping) check
during system discovery and before other
operations.
No
Recommended
B.7 ProLiant C-Class Blade Enclosure
Table B.7 ProLiant C-Class Blade Enclosure Connectivity - Firewall/Port Requirements
Protocol
Ports
Source
Destination
Function
Configurable
Optional
TCP
443
Hosting Device
Onboard
Administrator
RIBCL Event Listener
No
Required
UDP
161
Hosting Device
Onboard
Administrator
SNMP. This is the standard port used by
SNMP agents on monitored systems. The
Hosting Device sends requests to devices
on this port.
No
Required
UDP
162
Onboard
Administrator
Hosting Device
SNMP Trap. This is the standard port used
by SNMP managers for listening to traps.
No
Required
TCP
7906
Onboard
Administrator
Hosting Device
Secure HTTP (HTTPS) port used by the
listener running in the Director's Web
Interface. The monitored host connects
to the Hosting Device on this port (e.g.
https://target.sys.name.here:7906)
No
Required
ICMP
N/A
Hosting Device
Monitored Systems
Provides system reachability (ping) check
during system discovery and before other
operations.
No
Recommended