Specifications

Architecture
23
Introduction
This secure session allows IP traffic from the EMC internal service
person to be routed through the Gateway Client to the end device. IP
socket traffic received by the Global Access Server for the session is
established, wrapped in a SOAP message, and sent to the Gateway
Client over the persisted SSL tunnel. The Gateway Client unwraps
the SOAP object and forwards the traffic to the IP address and port of
the end device for which the session was established. SOAP
communication flows between the Gateway Client and the Global
Access Server through this tunnel until it is terminated or times out
after a period of inactivity. Figure 4 on page 23 provides an
illustration of the remote access communication paths.
As the result of an application remote access session request, the
Gateway Client forwards traffic only to the specific ports at the IP
address associated with the registered serial number of the EMC
device at the time of deployment.
Figure 4 Remote access communication
Table 2 on page 23 shows which EMC products use the remote
notification and remote access features of ESRS.
Remote support application
SOAP
EMC storage
array
EMC web and
access servers
SSL tunnel - TLS with RSA key exchange
AES-256 with SHA1 encryption
Client
Table 2 Product use of ESRS (page 1 of 2)
Product
Remote notification to
EMC via ESRS
EMC remote access to device
via ESRS
EMC Atmos
®
Ye s Ye s
EMC Avamar
®
Ye s Ye s
EMC Celerra
®
Ye s Ye s
EMC Centera
®
Device does not send
Connect Homes via the
Gateway Client
Ye s
EMC CLARiiON
®
Ye s Ye s