Hardware Installation
We recommend that you install NSMXpress on your LAN to ensure that it can
communicate with your applicable resources, such as authentication servers, DNS servers,
internal Web servers through HTTP/HTTPS, external Web sites through HTTP/HTTPS
(optional), the Juniper update server via HTTP, Network File System (NFS) file servers
(optional), and client/server applications (optional).
NOTE:
If you decide to install NSMXpress in your DMZ, ensure that it can
connect to your internal resources.
NSMXpress Ports
Table 1 on page 4 provides required port information on the NSMXpress.
Table 1: Required Ports on NSMXpress
Depends on
Configuration
Internet
LAN
Description
Port
Direction
No
No
Yes
SSH command-line management
22
In
No
No
Yes
Web interface for administrator
login
443
Yes
Yes
LAN
Web interface for listening for NSM
API messages.
8443
No
Yes
Yes
Connections from managed
devices to NSMXpress
7800
No
No
Yes
Connections from the NSM GUI
Client to NSM
7801
Yes
No
Yes
Heartbeat between peers in an HA
cluster
7802
Yes
Yes
Yes
Connections from managed IDP
devices to NSM
7803
Yes
Yes
Yes
Connections from devices running
Junos , Secure Access devices, or
Infranet Controller devices
7804
Copyright © 2010, Juniper Networks, Inc.
4
NSMXpress Quick Start
