H3C Technologies H3C Intelligent Management Center - Manual (Page 88)

81
9 Security and backup
Anti-virus software
To ensure secure operation, H3C recommends installing anti-virus software on IMC servers and keeping
the virus definitions up to date.
Port settings
H3C recommends using a firewall to control the data sent to the IMC server cluster, that is, filter the
non-service data sent to the IMC server. In this way, you can prevent abnormal attacks.
CAUTION:
•
H3C recommends that you use ACL configurations on a firewall rather than on a switch to control data
packets. Otherwise, packet fragmentations are filtered.
• When you have installed firewall software on the IMC server, besides setting the ports listed in Table 10,
set an IP address for the IMC servers to ensure normal communication between them.
Table 11 and Table 12 list the port numbers used by IMC components.
Table 11 Ports used by the IMC Platform
Default port number Usage Location
TCP 8080, configurable HTTP access to IMC Device
TCP 8443, configurable HTTPS access to IMC Device
TCP 61616 Java Message Broker Device
UDP 161 Port to add a device to the IMC Device
UDP 22 Port for SSH operations Device
TCP 23 Port for Telnet operations Device
UDP 514, 515 Port for syslog operations IMC server
UDP 162 Port for trap operations IMC server
UDP 69
Port for Intelligent Configuration Center to perform
configuration management through TFTP
IMC server
TCP 20, 21
Port for Intelligent Configuration Center to perform
configuration management through FTP
IMC server
Table 12 Port numbers used by the IMC NTA/UBA
Default port number Usage Location
UDP 9020, 9021, 6343 Port for the IMC server to receive logs IMC server