Understanding HP SIM 5.1 and 5.2 security (481362-003, January 2009)

8
Port number is configurable in mx.properties using MX_SOAP_HTTP_PORT; port can be
enabled/disabled in globalsettings.props using HTTP_SOAP_PORT_ENABLE with “true” or “false.”
NOTE: It is not recommended that you enable management protocols such as SNMP or DMI on
systems outside your firewall or directly connected to the Internet.
Vulnerability and Patch Management Pack firewall ports
HP SIM Server
The following ports must be open on the HP SIM server.
Port Protocol Description
280 TCP HP SIM HTTP port
50000 TCP HP SIM HTTPS port
5989 TCP HP SIM Web-Based Enterprise Management
(WBEM)/WMI Mapper Secure Port
22 TCP HP SIM SSH port
50001 TCP HP SIM secure Simple Object Access
Protocol (SOAP) port
161 TCP/UDP SNMP
162 TCP/UDP SNMP traps
VPM Server
The following ports must be open on the VPM server.
NOTE: The following ports are applicable to the CMS only.
MSDE
Port Protocol Description
445 TCP MSDE Named Pipes Communications
1434 UDP MSDE Shared Instance Support
variable TCP MSDE TCP/IP Communications
VPM must be able to access the following websites through your firewall:
•
http://www.microsoft.com
•
https://ftp.hp.com
• http://support.microsoft.com
•
http://rhn.redhat.com
• http://www.cve.mitre.org
•
http://www.itrc.hp.com
•
http://www.msus.windowsupdate.com