Hi, all.
We're going to be revising our EM structure to a MOM/Collector setup in the near future, and I just need some clarification on what ports I really need to have open.
Our EM is behind a firewall, and some of the systems that will be connecting to Solman/EM in the future will be from outside that wall. Currently we use ports 8102 for the smdsetup command to register directly to Solman, and 6001 that allows connection to the EM.
Now, with the collectors out there, I'm assuming that the agents still connect first to solman and the MOM, which then connects them to an available collector. Do we then need to also include the collector vip/IP in the firewall rules, or does the initial connection to Solman/EM take care of the connection? This isn't really clearly laid out in any document that I can see.
Does MOM then drop the connection after the agent connects to the Collector, and is the agent then using port 6001 to connect to the collector? CA's doc seems to indicate that, but ...
Anyone got a diagram? 