Firewall Considerations

SA Provisioning Build Plans may make minor modifications to the firewall configurations on managed servers on Windows platforms so that communication between the SA Core and the SA Agent is not blocked. For other managed server platforms, the installation profiles may disable the firewall.

Note If you customize installation profiles to contain a firewall, ensure that the connection between the SA Core and the SA Agent is not blocked.

Examples

For Red Hat Enterprise Linux, the following line in your ks.cfg profile enables the firewall and allows the SA Agent to function correctly:

firewall --enabled --port 1002:tcp

For SUSE Linux Enterprise Server, the following lines in the autoyast.xml profile enable the firewall and allow the SA Agent to function correctly.

<firewall>

<FW_SERVICES_EXT_TCP>1002</FW_SERVICES_EXT_TCP>

<enable_firewall config:type="boolean">true</enable_firewall>

<start_firewall config:type="boolean">true</start_firewall>

</firewall>