BusinessObjects Enterprise Administrator's Guide

Specifying firewall rules for packet filtering

When there is a firewall between the application server and the rest of the BusinessObjects Enterprise servers you need to specify the inbound access rules and one outbound rule. The outbound rule is needed because the application server may register listeners with any of the BusinessObjects Enterprise servers.

For details of how to specify these rules, consult your firewall documentation. For details about the rules see:

• Inbound Rules
• Outbound Rules

The fixed port numbers specified in the chart are the port numbers you specify for the CMS and other BusinessObjects Enterprise servers using -requestport.

Inbound Rules

Source Computer	Port	Destination Computer	Port	Action
Application server	Any	CMS	6400	Allow
Application server	Any	CMS	fixed	Allow
Application server	Any	Other BusinessObjects Enterprise server	fixed	Allow
Any	Any	CMS	Any	Reject
Any	Any	Other BusinessObjects Enterprise servers	Any	Reject

Note:    There must be an inbound firewall rule for each BusinessObjects Enterprise server behind the firewall. Whenever more than one server is installed on the same machine, each server on that machine must use a unique port number.

Outbound Rules

Source Computer	Port	Destination Computer	Port	Action
Machines hosting BusinessObjects Enterprise server	Any	Application server	Any	Allow

This outbound rule is needed because the application server may register listeners on servers behind the firewall. These listeners may initiate communication with the application server.

Related topics:    

• "Changing the default server port numbers" on page 139