SunMC console through firewall

Our firewall sits between our SunMC server/agents and our Windows PCs (SunMC console gui) I'd like to control what ports the SunMC server talks to the console on so that I don't have to have all ports open in our firewall.
Has anyone changed what ports the server uses to talk to the consoles on? It looks like they are all high ports and it would be nice if I can define a range of ports. I can see in the docs how to configure what ports the agent talks to the servers on, but wasn't able to find th same info for the server <--> console portion.
Thanks,
Karen

Hi Karen,
Unless things have changed, the Java RMI communication between the Server and Console uses unbound (dynamic) ports, and there is no option to restrict them to a certain range.
Do you need all the functionality of the standard Java Console? Many organizations use the full Console to setup SunMC, then use the web interface through a browser for day-2-day viewing. The web server is part of the standard free SunMC 3.5 distribution, requires no additional license, and uses a single http/https port... which you should easily be able configure your firewall to accept.
I recommend giving the web interface a try to see if it meets your needs. If not, then you may need to look into some sort of tunneling/VPN solution. You could even use a free X Server on your Windows box (i.e. Cygwin) to run the Java Console off of your SunMC Server, but that may be a bit slow.
Regards,
Mike
Standard disclaimer: I am an employee of Halcyon (www.HalcyonInc.com)

Similar Messages

Problems accessing Grid Console through firewall

I am trying to set up my Grid console to be accessible pubically. My Network admin add a entry to the CSS for a public IP and site oms.domain.com which points to http://host:7777/em. I have been unable to get this to work though. I can get to the console localy on 7777 and 4889 but not using this public address.
I tried to add a proxy server to the OMS for the oms.doamin.com on prot 80 but this does not seem to have any affect.
Anybody have any luck configuring the console like this?
Thanks,
Brian

Reinstall the OMS just so I can access it through a firewall? The oms.domain.com address is registered in the CSS and points to my hostname:7777/em why would I need to reinstall? I figured there was just a config file within Apache that I would need to update to tell Apache to allow connections from the public address. Seems overkill to reinstall everything. This OMS is monitoring a couple hundred targets at this point. Reconfiguring all that would be slightly painfull.
Any other suggestions?

Unable to login to Web console through xelsysadm.

Hi All,
I am unable to login to the web console through xelsysadm.It doesn't show any error message, but the process bar goes on for some time and then shows the session is expired. I have a delegated admin with 5 users.
The users present in this group are able to login with in second span of time.But Xelsysadm is unable to login.
Can any one help me on this.
Thanks in Advance.

Both the field has a value 0 in database. when I enter the credintials and submit it, the status bar goes on for a long time and its not enterning into web console.the login page appears for long period with status bar progressing and it even stay in that state for 24hrs with out logging in.
But wen I use delegate admin, he is able to login with in seconds of time.

Running Gaming consoles through iMac

I was wondering if it is possible to run an xbox 360 or any gaming console through my iMac, and if so what I need to get in order to do so.
Thanks

I've heard this product mentioned before as a solution:
http://www.elgato.com/index.php?file=products_eyetv250na
It mentions "Connect game console (zero latency game play - USB 2.0 only)"

Enterprise Management Console through borwser

Hi,
I tried to configure Enterprise Management Console through borwser
using docs
http://download-west.oracle.com/docs/cd/B10501_01/em.920/a96673/ch5.htm#1656
But while clicking on
"launch console" still it is opening in normal mode.
Regards,
Mathew

In Oracle 9i don't expect to see an enterprise manager like the one in 10g, 9i works with a Java class that is downloaded through the browser in an applet mode. So even if you configure the console the way it is mentioned in the document, the result will this, you will see the console exactly the way it is displayed in the traditional Java Client Mode.
The pourpose to access the Java Console through web is to have access to the EM Console in an environment where you don't have the client installed, but you can reach the server through browser.

Client connecting through firewall

Hi
          We have two clustered servers.Our client is connecting through
          firewall NAT. When iam connect to first server the response is very slow and
          at the same time clustering is not working.If i stop the second server the
          response fast .
          The same configaration is working fine when my client is local.
          Can you explain the reason for this problem ?
          Presently iam using weblogic 6.1 version.
          Thank you


OK I spoke too soon. The user looked like it was working but it was working because it matched another IAS policy further down the list. It seems as though the PIX refuses to use ms-chap of any sort. If I include the authentication type in the VPN policy conditions as ms-chap, it skips the VPN policy I am using to authenticate this. If I remove it, then it gives an invalid authentication type as if whatever the PIX is sending the IAS server does not understand as ms-chap.
It seems like the PIX authentication is totally wrong for use with IAS. What else do I need to add to this configuration to gewt it to work with ms-chap of any kind? I really don't get it.

Discoverer through firewall

Hi all,
hi have installed Oracle Business Intelligenge 10g (10.1.2). I
I lunch Oracle discoverer plus in the local network and all work fine. But when i try to access to oracle discoverer by interner (through firewall ) i see the logon page but after input User Name Password ed cnnect string a obtained Page not Found.
Thank in advance.
Best Regards
Giuseppe Marcello

By Default, Discoverer uses JRMP protocol, which does not necessarily pass
through the firewall.
Configure Discoverer to use HTTP instead of JRMP and it will solve your problem.
The 10.1.2 Discoverer Enterprise Manager allows you to configure this.

How to get to x6250 Remote console through a ssh tunnel?

I am accessing webGUI of my x6250 blade console through a ssh tunnel, I can log into eLOM, but when I launch remote console, the java client starts, then a java IOException window comes up with message saying "Create connection failure".
When I access eLOM directly from company network without ssh tunnel, all works fine, so it is not my local system's setup or JVM issue.
I am forwarding following ports already: 80, 443, 5120, 5121, 5123, and 7578.
I suspect I missed some more ports for remote console usage, but which one(s)?
YZ

[ports needed for lights out management.]
a) There does not appear to be an official Sun source for the port data.
b) ILOM, ELOM, [a-z]LOM each seem to require their own selection of ports.... Beware.

Itunes gets blocked through Firewall

I have Sonic Wall TZ 150 Standard as a firewall gateway and allowing hand ful of websites in to the allowed list of domains in Sonic wall so as to restrict others. But with this my Itunes was getting blocked and not allowing My IPHONE to update. So I run netstat utility and added all list of IP address coming up in to the allowed list of domains but still ITUNES is getting blocked.
So can you tell me if apple is using specific IP address list or is there any other process to get Itunes working through firewall.

and the McAfee Security programs
Doublechecking ... do your McAfee products include McAfee Family Protection?
If so, check to see if your McAfee Family Protection is currently blocking iTunes, as per the following McAfee document:
Using McAfee Family Protection Web Blocking
If iTunes is currently being blocked, unblock it.
Are you able to get through to the Store now?

Can RMI get through firewall?

my java applet will have to communicate with SAP server using JCO
so the applet connects to an RMI server then the RMI server connects to SAP server.
in between applet and RMI server there is a firewall. will RMI get through firewall?

The answer is "maybe". It depends on
o How the service is coded. Probably has to be written to communicate using a fixed port number, rather than randomly assigned. (Most firewalls allow access to only specified ports.)
o Changing the firewall settings.
o Whether or not your server tries to call back the client, and whether the client is also behind a fireall. If these two details are both true, then you are probably dead in the water.
There are HTTP tunelling techniques for getting through firewalls. Haven't used them, but if you look back through this forum you'll probbly find some info.

Urgent_Socket Programming through firewall

Hi all...
I am developing multiple client-one server application through socket programming.
I have one client who will send real time data on request of another client.
This whole data will pass through socket connection.(something like video conferencing)
Steps:
1.Client B sends request to Client A through server.
2.Server accepts connection and gives Client B's IP address and port number
to Client A.
3.Client A sees the request and starts transferring real time data to Client B by opening Socket connection.
I have following doubts:
1. What exactly role of server
2. Important is What about firewall?* This communication has to happen through firewall also.*
What technique has to be used to pass data through FIREWALL.
Thanks In Advance.

Hi..
can you please give me some details about how to write program using SOCKS.
i have developed simple application using Socket and Server socket.
I want this application to be run over web,from anywhere,from any machine.
Thanks

Using portal admin console through an ssh tunnel?

I'm trying to login on the portal admin over an established ssh connection:
- profile server listen on hostname.subdomain.domain, port 8080
- an ssh tunnel (via portforwarding through a firewall) from client port
10000 to profile server 8080
- connect from webbrowser to http://localhost:10000/console
that won't work: internal server errors. If i change my hosts file:
localhost 127.0.0.1 hostname.subdomain.domain
it works. But this is ugly and conflicts with DNS.
So, how can i configure the profile server to accept connections over an ssh
tunnel? Anyone any idea?
regards, Jordi

Hello,
Does any one in BEA have an answer to this. I was stumped when asked by a client. Any response will be great.
C

SunMC Console on Windows XP not connecting

Hello,
I have just installed SunMC Center on my PC and attempted to login into the SunMC Server but get an error of communication could not be established, the server version may be incompatible.
I am able to connect using another PC, so my SMC server is up and the processes are up and fine. The working PC is on the same segment as my new PC, so I dont know what could be the issue with this PC thats not working.
Has anyone ran into this before? If so, what is not configured?
TIA
LR

Hi,
I had this problem-it is not a firewall issue (I had the problem with
both the firewall on my PC and the server down) but seems
to be a weird software conflict.I posted a message on this some
time ago (displayed below)..
Glad to see somebody else is also having this problem and it is not
just me.Anybody have the console on Windows XP working?
So far all I have found out is that port 23 of the SMC server is being
accessed by the SMC console on the PC (which is not working) but
on the laptop install of the SMC console it is not (this information is from
firewall logs).
Both the SMC consoles on the Laptop and the PC are installed from
the same packages.Both have the same firewall settings,both report the same java version..
Needless to say if you get it working let us know how you did it.
Cheers,
Ian
====================================
I have been trying to get the Java based console
Working from my PC and have found the following
oddments. When I run it from my PC the console fails
with a message saying �Communication could not be
Established with the server. The server version may be
Incompatible� If I then get my laptop, which has the same
Operatating system, same firewall setup, same virus software,
Same java :-
java version "1.4.2_03"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_03-b02)
Java HotSpot(TM) Client VM (build 1.4.2_03-b02, mixed mode),and the same smc software ,
remove my PC from the network and plug in my laptop in which has the
same IP address as my PC,the console software works! Does anybody have any
idea what could be preventing the console on the PC working whilst the
laptop is fine? I have a few ideas in that the console software installed on some
other pcs does not work as well so there appears to be something in common
Installed on the PC�s (but not on the laptop) which is somehow stopping
the console from working. Now ,my pc is one inherited from the ghost of sys admins
Past but there is nothing as far as I can see which could cause some form of
Conflict-I am mainly focusing on Java based software..What I guess I will have to do
Is to uninstall as much software as I can and hope to eventually find the
Culprit..

Is it possible to restrict SNMP access through firewall

My appoligies if there is already an answered discussion about this, that I didn't find.
In addition to just limiting the IP addresses allowed to have access and TCP/UDP port and direction of access, is it possible to further restrict SNMP traffic through an ASA firewall. Example 1: Can IP address IP_A on network A be forcibly limited to have only readonly SNMP polling access to IP_B on network B on the other side of an ASA firewall regardless of the community string it issues(or the configuration of device IB_B )?
IP_A ------- FW -------- IP_B
Example 2: Can IP address IP_A on network A be forcibly limited to have only readonly access to specific OID via SNMP polling access to IP_B on network B on the other side of an ASA firewall regardless of the community string it issues (or the configuration of device IP_B)?
IP_A ------> FW ------> IP_B
It looks like IOS 10.3 and above allow devices to have such access limiting. I was wondering if this could also be done via ASA for any end device.
Thanks
Jim

No.
An ASA can, as you noted, restrict source and destination IP and port. To do what you are asking, one would need to prevent a string within the payload from being transmitted (or only accept certain strings).
You should just put the access-list on the destination device(s) restricting what host(s) are allowed snmp rw (as you alluded to). That's a very common implementation straight out of the textbook.

ITunes will not connect to iTunes store. Internet is valid and iTunes is allowed through firewall. Help.

Every time I try to connect to the iTunes store or use the internet in any sort of way through iTunes I recieve an error message that says "network connection refused." Obviously my internet connection is still working or I wouldn't be on this website, and I've checked both windows firewall, and the McAfee Security programs and there are no blockages in either case. I'm thinking a recent version on iTunes caused the problem. Running on Windows Vista Home edition.

and the McAfee Security programs
Doublechecking ... do your McAfee products include McAfee Family Protection?
If so, check to see if your McAfee Family Protection is currently blocking iTunes, as per the following McAfee document:
Using McAfee Family Protection Web Blocking
If iTunes is currently being blocked, unblock it.
Are you able to get through to the Store now?

SunMC console through firewall

Similar Messages

Maybe you are looking for