HP StoreFront Mobile Access Software - Manual (Page 20)

Firewall planning
During installation of HP StoreFront Mobile Access server software, the installer automatically adds
port exceptions to the Windows firewall on the physical or VM server.
• If other firewalls are present, such as McAfee Firewall or ZoneAlarm, administrators must add
exceptions to those firewalls.
• If mobile devices are allowed to connect to HP StoreFront Mobile Access servers from outside a
corporate network, it may be necessary to add an exception for the Mobile Access Server port to
the corporate network firewall. If mobile devices use a VPN to connect from outside a corporate
network, then exceptions to the corporate firewall are not required. HP recommends using a VPN.
See
“VPN planning” (page 19) .
• Server port exceptions. The installer adds exceptions to the Windows firewall for the 3PAR
Content Provider port, Communication port, Security port, and Server Configuration port. See
“Server services and ports” (page 23) . When other firewalls are present, administrators must add
these port exceptions to allow HP StoreFront Mobile Access server components to communicate
with each other.
• iOS port exception. The installer adds an exception to the Windows firewall for the iOS
Notifications Outbound port (2195). When other firewalls are present and iOS devices will be
supported, administrators must add this port exception. The HP StoreFront Mobile Access server
uses this port to connect to the Apple Push Notification Service (APNS). If iOS devices will not be
supported, then administrators do not need to add an exception.
If APNS is not setup in the environment, the HP StoreFront Mobile Access iOS app can still be
used; however, mobile devices will not receive notifications.
Firewall exception methods
Firewall software typically allows exceptions by specifying applications (executable files), or by
specifying port numbers. Some firewall software can create exceptions based on the applications
that are running. Please refer to your firewall software documentation for specific procedures to
add exceptions.
• When firewall exceptions are necessary, HP recommends adding them using the applications
method.
• If you add application exceptions to firewalls and then later update HP StoreFront Mobile Access
server software, you should re-add the exceptions to the firewalls.
Application exceptions on Windows 32-bit servers
The following application executable files should be specified:
• C:\Program Files\Hewlett-Packard\HP StoreFront Mobile Access Server\
MG\bin\win-32\mg.exe
• C:\Program Files\Hewlett-Packard\HP StoreFront Mobile Access Server\
XF\bin\win-32\xf.exe
• C:\Program Files\Hewlett-Packard\HP StoreFront Mobile Access Server\
jre\bin\java.exe
Application exceptions on Windows 64-bit servers
The following application executable files should be specified:
• C:\Program Files (x86)\Hewlett-Packard\HP StoreFront Mobile Access
Server\MG\bin\win-32\mg.exe
• C:\Program Files (x86)\Hewlett-Packard\HP StoreFront Mobile Access
Server\XF\bin\win-32\xf.exe
20 HP StoreFront Mobile Access servers