Firewall port opening!

[AlishaSandy]

Hi All,
ufabet
Do we need to open the ports 10051 and 10050 in bidirectional mode at firewall level ?
Thanks
Alisha

[poxeron]

hmm. dependence of checks passive\active ?

[Hamardaban]

SERVER:(>1024) ——> PASSIVE_AGENT:10050
SERVER:(>1024) <—— established tcp connect —— PASSIVE_AGENT:10050

SERVER:10051 <————- ACTIVE_AGENT:(>1024)
SERVER:10051 —— established tcp connect ——> ACTIVE_AGENT:(>1024)

[Iggy]

It is not so clear.
Do Server - Agent communication needs to be bidirectional in passive mode or in active mode?
In most cases, vendor make it clear if communication needs to be bidirectional. In this case, it is not clearm and that info is important in our environment.

[cyber]

Yes it needs to be bidirectional, as Hamardaban already pointed... Your FW should allow "answers" back to initiating side... with passive agent, initiator is server/proxy, with active agent, initiator is agent.