F5 FirePass, Руководство администратора

Страница: 29 / 182

Deploying the FirePass Server
FirePass
™
Server Administrator Guide 2 - 9
About the traffic between the FirePass server and the Desktop
Agent
To allow traffic from the FirePass server to the corporate LAN using the My
Desktop feature, you must open firewall ports as shown in Table 2.5.
The FirePass client on the desktop computer on the local LAN uses ports 80
and 81 to initiate communications with the FirePass server during My
Desktop sessions. The FirePass server “wakes” the client on port 661, then
communicates with it on port 443. The client then initiates a new connection
on port 81 back to the FirePass server.
Host Activation Protocol (HAP) is a registered port (661) which allows the
FirePass server to initiate a session with the FirePass Desktop Agent. The
FirePass server communicates with the Agent on port 443.
Note
The port numbers in the following table are default values which you can
change. For more information, see Configuring the My Desktop Webifyer,
on page 4-31.
Client/Server
applications
(response) TCP Local LAN User-defined
TCP FirePass
server 1025 to
65535 Yes Required for
each App
tunnel
SSL VPN
Connector TCP
UDP
ICMP FirePass
server 1025 to 65535 Local LAN Any ports
as needed Required for
SSL VPN as
needed
SSL VPN
Connector
(response) TCP
UDP
ICMP Local LAN Any ports as
needed FirePass
server 1025 to
65535 Yes Required for
SSL VPN as
needed
Traffic Type Protocol
Source Destination
Ack
bit Comment Address Ports Address Ports
Table 2.4 Traffic between FirePass server and application services (Continued)