IBM Endpoint Manager internet issue

system · June 27, 2014, 2:34am

(imported topic written by mail4vijay)

I want to know if we Keep IBM endpoint Manager server inside the DMZ zone then, will it make any difference for endpoint client connectivity between IEM app server to IEM Client machine?

Or just need to open certain ports from app server to endpoint client server(both-ways)?

Thanks

TimRice · July 1, 2014, 5:44pm

(imported comment written by Tim.Rice)

Check out the following URL

https://www.ibm.com/developerworks/community/wikis/home?lang=en#!/wiki/Tivoli%20Endpoint%20Manager/page/Internet%20Relays

You leave your IEM server inside the Corporate Network, with Relays in the DMZ. Open port 52311 from the Internet into the DMZ and from the DMZ into the Corporate Network. I then specify a FailoverRelay setting on all the Endpoints using a Fixlet with a script command that uses the MOD of the ComputerID to attempt to spread the external Endpoints across the DMZ Relays, something like the following command …

setting “_BESClient_RelaySelect_FailoverRelay”="{item 1 of item 1 of (computer id mod 2, (0,“http://dmzrelay01.company.com:52311/bfmirror/downloads/”; 1,“http://dmzrelay02.company.com:52311/bfmirror/downloads/”)) whose (item 0 of it = item 0 of item 1 of it)}" on “{now}” for client

system · August 8, 2014, 4:53pm

(imported comment written by mail4vijay)

Ok , thanks will check and come if i face any issue.