Video Screencast Help

NetBackup Appliance - Hardening Question

Created: 02 Jul 2013 • Updated: 03 Jul 2013 | 2 comments
work7x24's picture

Dear All,

There is Critical System Protection Suite come with NetBackup appliance.

May I know if customer can

1) configure ssh for specific server (client) hosts to remote only?

2) select which port(such as http/80 , ssh/22...)  turn on / turn off on the appliance ?

Thanks all

Operating Systems:

Comments 2 CommentsJump to latest comment

inn_kam's picture
  • For NetBackup 5xxx Appliances:

Open ssh/22, http/80, and https/443 inbound for in-band administration.
Open http/80 and https/443 inbound to the Intelligent Platform Management Interface (IPMI) for out-of-band administration.
Open 5900 inbound to the IPMI for KVM remote console/CLI and virtual ISO/CDROM redirection from NetBackup Integrated Storage Manager (5020/5200 appliances).  
               Port 623 will also be used if open.
Open 7578 inbound to the IPMI for Remote Console CLI access (5220/5x30/5400 appliances).
Open 5120 inbound to the IPMI for Remote Console virtual ISO/CD-ROM redirection (5220/5x30/5400 appliances).
Open 5123 inbound to the IPMI for Remote Console virtual floppy redirection (5220/5x30/5400 appliances).
Open https/443 outbound to the Symantec Call Home server for proactive hardware monitoring and messaging.
Open https/443 outbound to the Symantec Critical System Protection (SCSP) server to download SCSP certificates.
Open snmp/162 outbound to the SNMP server for SNMP traps and alerts.
Open 11111 between PureDisk appliances for multi-node topology discovery.

taken from

NetBackup 6.x and 7.x firewall port requirements
Article:TECH136090  |  Created: 2010-01-17  |  Updated: 2013-06-28  |  Article URL
CRZ's picture

FYI, we have a separate Appliances forum as well:

You may also want to ask there. | APPLBN | 761LBN