Firewall Concepts and Configuration - HP Operations Manager

More documents

Recommendations

Info

Contents 3. Configuring HTTPS Nodes Specifying Client Port Ranges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 Management Server and Managed Node Port Settings. . . . . . . . . . . . . . . . . . . . . . . . . 54 Configuring a Firewall for HTTPS Nodes without a Proxy. . . . . . . . . . . . . . . . . . . . . . 55 Configuring a Firewall for HTTPS Nodes with Proxies. . . . . . . . . . . . . . . . . . . . . . . . . 56 Configuring the OVO Management Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Configuring OVO Managed Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Systems with Multiple IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 HTTPS Agents and Network Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Address Translation of Outside Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Address Translation of Inside Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Address Translation of Inside and Outside Addresses. . . . . . . . . . . . . . . . . . . . . . . . 64 IP Masquerading or Port Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 4. Configuring DCE Nodes Management Server and Managed Node Port Settings. . . . . . . . . . . . . . . . . . . . . . . . . 69 Configuring a Firewall for DCE Nodes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Configuring the OVO Management Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Configuring OVO Managed Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Checking Communication Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Verifying Communication Settings of the Management Server. . . . . . . . . . . . . . . . . 78 Verifying Communication Settings of Managed Nodes . . . . . . . . . . . . . . . . . . . . . . . 78 Checking the Endpoint Map. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Windows Managed Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Communicating with a Windows Managed Node Outside the Firewall . . . . . . . . . . 80 Communication Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 DCE/UDP Communication Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 NCS Communication Type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Sun RPC Communication Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 MC/ServiceGuard in Firewall Environments. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Configuration Distribution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Distributing the Configuration in an RPC Call . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Embedded Performance Component. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Configuring Ports for the Embedded Performance Component . . . . . . . . . . . . . . . . . 89 Configuring the Embedded Performance Component . . . . . . . . . . . . . . . . . . . . . . . . 91 6
Contents Configuring Reporter and/or Performance Manager . . . . . . . . . . . . . . . . . . . . . . . . . 91 Configuring Reporter/Performance Manager With HTTP Proxy. . . . . . . . . . . . . . . . 93 Configuring Reporter/Performance Manager Without HTTP Proxy . . . . . . . . . . . . . 94 Changing the Default Port of the Local Location Broker . . . . . . . . . . . . . . . . . . . . . . 95 Systems with Multiple IP Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Systems Installed with OpenView Operations for Windows . . . . . . . . . . . . . . . . . . . 96 Checkpoint Firewall-1 4.1 Integration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Content Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97 Content Filtering for OVO . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 Combining Content Filtering and Port Restrictions. . . . . . . . . . . . . . . . . . . . . . . . . 100 DCE Agents and Network Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Address Translation of Outside Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101 Address Translation of Inside Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 Configuring the Agent for the NAT Environment. . . . . . . . . . . . . . . . . . . . . . . . . 103 Address Translation of Inside and Outside Addresses. . . . . . . . . . . . . . . . . . . . . . . 104 Configuring the Agent for the NAT Environment. . . . . . . . . . . . . . . . . . . . . . . . . 105 Setting Up the Responsible Managers File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 IP Masquerading or Port Address Translation . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 5. DCE RPC Communication without Using Endpoint Mappers About this Chapter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 Concepts of Current OVO Communication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111 DCE RPC Communication Concepts without using Endpoint Mappers . . . . . . . . . . 112 Objectives for DCE Communication without Using Endpoint Mappers for OVO. . 113 Port Requirements for Remote Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 Port Requirements for Manual Template and Instrumentation Deployment. . . . . 116 Communication Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118 Support Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120 OVO Components Affected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 OVO Components Not Affected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123 Setting of Variables for Processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123 Configuring Managed Nodes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124 RPC Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124 7
Page 1 and 2: HP OpenView Operations for UNIX Fir
Page 3: Trademark Notices. Adobe® is a tra
Page 8 and 9: Contents 8 Example of a port config
Page 10 and 11: Contents 10 CLIENT_BIND_ADDR() . .
Page 13 and 14: Conventions The following typograph
Page 15 and 16: OVO Documentation Map HP OpenView O
Page 17 and 18: Table 3 OVO Manuals (Continued) Man
Page 19: OVO Online Information The followin
Page 22 and 23: 22 ❏ Help Instructions Instructio
Page 24 and 25: 24 Accessing the Online Help To acc
Page 26 and 27: Firewall Configuration in OVO About
Page 28 and 29: Firewall Configuration in OVO OVO C
Page 36 and 37: Firewall Configuration in OVO Speci
Page 44 and 45: Firewall Configuration in OVO Netwo
Page 46 and 47: Firewall Configuration in OVO Netwo
Page 48 and 49: Advanced Configuration Special Conf
Page 50 and 51: Advanced Configuration Special Conf
Page 52 and 53: Configuring HTTPS Nodes 52 This cha
Page 54 and 55: Configuring HTTPS Nodes Management
Page 56 and 57:
Configuring HTTPS Nodes Configuring
Page 58 and 59:
Page 60 and 61:
Page 62 and 63:
Configuring HTTPS Nodes HTTPS Agent
Page 64 and 65:
Page 66 and 67:
Page 68 and 69:
Configuring DCE Nodes 68 This chapt
Page 70 and 71:
Configuring DCE Nodes Management Se
Page 72 and 73:
Configuring DCE Nodes Configuring a
Page 74 and 75:
Configuring DCE Nodes Configuring t
Page 76 and 77:
Configuring DCE Nodes Configuring O
Page 78 and 79:
Configuring DCE Nodes Checking Comm
Page 80 and 81:
Configuring DCE Nodes Windows Manag
Page 82 and 83:
Configuring DCE Nodes Communication
Page 84 and 85:
Configuring DCE Nodes Communication
Page 86 and 87:
Configuring DCE Nodes MC/ServiceGua
Page 88 and 89:
Configuring DCE Nodes Embedded Perf
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Configuring DCE Nodes Checkpoint Fi
Page 100 and 101:
Configuring DCE Nodes Checkpoint Fi
Page 102 and 103:
Configuring DCE Nodes DCE Agents an
Page 104 and 105:
Page 106 and 107:
Page 108 and 109:
Page 110 and 111:
DCE RPC Communication without Using
Page 112 and 113:
Page 114 and 115:
Page 116 and 117:
Page 118 and 119:
Page 120 and 121:
Page 122 and 123:
Page 124 and 125:
Page 126 and 127:
Page 128 and 129:
Page 130 and 131:
Page 132 and 133:
Page 134 and 135:
Page 136 and 137:
Page 138 and 139:
Page 140 and 141:
Page 142 and 143:
Page 144 and 145:
Page 146 and 147:
Page 148 and 149:
Page 150 and 151:
Page 152 and 153:
Generic OVO Variables and Troublesh
Page 154 and 155:
Page 156 and 157:
Page 158 and 159:
Page 160 and 161:
Page 162 and 163:
Page 164 and 165:
Page 166 and 167:
Page 168 and 169:
Page 170 and 171:
OVO Variables and Troubleshooting f
Page 172 and 173:
Page 174 and 175:
Page 176 and 177:
Page 178 and 179:
Page 180 and 181:
OVO Variables and Troubleshooting a
Page 182 and 183:
Page 184 and 185:
Page 186 and 187:
Page 188 and 189:
Page 190 and 191:
Page 192 and 193:
Page 194 and 195:
Page 196 and 197:
Page 198 and 199:
Page 200 and 201:
Page 202 and 203:
Index Communication Manager communi
Page 204 and 205:
Index communication port settings,
Page 206 and 207:
Index description, 34 NCS NODE desc
Page 208 and 209:
Index communication port settings,
show all

Firewall Concepts and Configuration - HP Operations Manager

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?