Hi Folks

recommended way for Microsoft to communicate an Agent in DMZ is using the GTW Server. And there is other ways to make the communication of these agents through certificates.

I remember that there is some or several doors that can be opened in the firewall for the communication of these agents.

Not the best practices recommended by Microsoft, but it ispossible. I would like to perform a test by opening these ports, but do not know what! Does anyone have this informationt o share?

Thank you again to all!

Thank you!

The only port , open for communicate between agent and management server, is 5723.

Roger

Hi,

Regarding monitoring DMZ agents, I would like to suggest you refer to the following articles which are about the ports and  configurations:

Using a Firewall

http://technet.microsoft.com/en-us/library/hh467904.aspx

Step by Step for using Certificates to communicate between agents and the OpsMgr 2007 server

http://blogs.technet.com/b/operationsmgr/archive/2009/09/10/step-by-step-for-using-certificates-to-communicate-between-agents-and-the-opsmgr-2007-server.aspx

In addition, I noticed the  following post may be helpful as well:

OpsMgr 2007: Port requirements for SCOM agents in a DMZ

http://blogs.technet.com/b/operationsmgr/archive/2009/02/17/opsmgr-2007-port-requirements-for-scom-agents-in-a-dmz.aspx

T

Thanks Roger and Nicholas Li for information.

I'll do a test and post the answer.

Thank you once again for your help!