Firewall Considerations

The type of "outbound" access that MOVEit Central requires through a firewall depends on which remote hosts you want to access. For example, if you want to access a remote MOVEit DMZ server, you must allow Central to connect to that server using HTTPS.

It is not normally necessary for firewall rules to be configured to allow "inbound" access to a MOVEit Central. Two exceptions:

• If MOVEit Central Admin needs to be allowed to connect from a remote IP addresses through a firewall. (In this case, configure MOVEit Central to force SSL encryption when communicating with MOVEit Central Admin). Ports 3471, 3472, and 3473 are used.
• If an additional server (for example, Microsoft IIS FTP) has been installed on the same platform as MOVEit Central.

  Although inbound firewall rules are not required to access MOVEit Central in this situation, most firewall administrators take a "rules for machine" view rather than "rules for application" view. Therefore, it is a good practice to inform your firewall administrators if you plan on installing any "helper" services on the MOVEit Central platform.)

For more information, see Port Numbers.