Configuring the MediaAgent for Two-Way Firewall

You must configure the MediaAgents to receive communications from the client. This configuration is necessary to enable backup and restore operations on the clients.

During the firewall configuration, you will set incoming connections from the client as Restricted.

Before You Begin

You must have configured the CommServe computer to receive communications from the client. For instructions, see Configuring the CommServe Computer.


  1. From the CommCell Browser, expand Client Computers, then right-click the MediaAgent and click Properties.
  2. In the Client Computer Properties dialog box, click Network.
  3. On the Firewall Configuration tab, select Configure Firewall Settings, then on the Incoming Connections tab, click Add.
  4. In the From list, select the name of the client you just installed.
  5. In the State list, select RESTRICTED since the client can reach the MediaAgent. (Restricting or Blocking Connections explains the RESTRICTED setting.)
  6.  Click OK.
  7. Click the Incoming Ports tab, then in Listen for tunnel connections on port, set the port number on which the incoming tunnel connection is received.
  8. Optional: Set additional incoming ports:
    1. In the From box, enter a starting number in a port range.
    2. In the To box, enter an ending number in a port range.
    3. Click Add.
  9. For more information about additional ports, see Optimizing Backup and Restore using Additional Ports.

  10. Right-click the MediaAgent computer, then point to All Tasks and click Push Firewall Configuration.
  11. Click Continue to acknowledge the warning, then click OK to close the confirmation.
  12. Verify that your firewall configuration was pushed successfully by checking the Event Viewer window.

What to Do Next

Configuring the Clients