Firewall Concepts and Configuration - HP Operations Manager

HTTPS/TCP Communication
Firewall Configuration in OVO
OVO Communication Concepts
HTTPS 1.1 based communications is the latest communication
technology used by HP OpenView products and allows applications to
exchange data between heterogeneous systems.
OpenView products using HTTPS communication can easily
communicate with each other, as well as with other industry-standard
products. It is also now easier to create new products that can
communicate with existing products on your network and easily
integrate with your firewalls and HTTP-proxies.
HTTPS communication provides the following major advantages:
Firewall Friendly
Secure
Open
Scalable
DCE/UDP Communication
Since UDP does not do any transmission control, communication packets
can be lost on the network. DCE RPC’s, based on UDP, implement their
own transmission control on a higher level of the communication stack.
Therefore no communication can be lost.
Since UDP is not connection based, everything is cleaned up immediately
after the communication is complete. This makes it the preferred choice
for all nodes where the following applies:
❏ The node is located inside the firewall. See “DCE/UDP
Communication Type” on page 82 for more information.
❏ The node is connected on a good LAN connection where few packets
are lost.
DCE/TCP Communication
TCP is a connection-oriented protocol. The protocol will detect if packets
are dropped on the network and re-send only those packets. This makes
it the choice for all bad networks.
Since TCP is connection oriented, it keeps open a connection for a period
after communication is finished. This is to avoid having to reopen a new
connection if other communication is requested later. This can cause
Chapter 1 33