Esrs ip client inboud traffic

Question

Hello, a customer wants to restrict inbound access to the ESRS IP client.

He wants to know the ip range from which EMC Support connects to the ESRS Client in order to allow this range on the firewall, and deny everything else.

Can anyone help me?

Thanks in advance.

Mario

dynamox · Answer

Mario, have you had a chance to look at this document ? https://support.emc.com/docu37729_Secure_Remote_Support_2.20_Port_Requirements.pdf?language=en_US

mariomario1 · Answer

Yes I have but there I've found only that inbound port is 443... my customer doesn't want to open 443 port INBOUND to the whole internet. I have a list of IPs that esrs client connect to, that is the outbound traffic. Customer wants a range of IP addresses used by EMC engineer to connect to his storage system.

Thanks

Cal-IF4UI · Answer

As you review the recommended document https://support.emc.com/docu37729_Secure_Remote_Support_2.20_Port_Requirements.pdf?language=en_US

you will notice that EMC ESRS Inbound goes direct from EMC to Customer gateway, the same with all ports open for the application, Unisphere, Putty, Naviseccli, access to Service Processes, Control Stations, this is all within the customers Gateway which is in the customer environment the Customer gateway the Internet is configured and accessed from the ESRS Gateway / Network.

Secure Remote Services (ESRS)

Esrs ip client inboud traffic

Was this post helpful?