Firewall Considerations

The type of "outbound" access that MOVEit Automation requires through a firewall depends on which remote hosts you want to access. For example, if you want to access a remote MOVEit Transfer server, you must allow MOVEit Automation to connect to that server using HTTPS.

It is not normally necessary for firewall rules to be configured to allow "inbound" access to a MOVEit Automation. Two exceptions:

• If MOVEit Automation Admin needs to be allowed to connect from a remote IP addresses through a firewall. (In this case, configure MOVEit Automation to force SSL encryption when communicating with MOVEit Automation Admin). Ports 3471, 3472, and 3473 are used.
• If an additional server (for example, Microsoft IIS FTP) has been installed on the same platform as MOVEit Automation.

  Although inbound firewall rules are not required to access MOVEit Automation in this situation, most firewall administrators take a "rules for machine" view rather than "rules for application" view. Therefore, it is a good practice to inform your firewall administrators if you plan on installing any "helper" services on the MOVEit Automation platform.)

For more information, see Port Numbers.