Overview of Crystal Enterprise and firewall configuration

By default Crystal Enterprise uses dynamically chosen port numbers for communications between components. You must change this default when you place a stateful firewall that uses packet filtering or Network Address Translation (NAT) between Crystal Enterprise components because these firewalls provide protection by permitting communications from outside the firewall with only specified addresses and ports inside the firewall.

To enable Crystal Enterprise to communicate across such a firewall, you must configure its components to use fixed addresses and ports. Then you must configure your firewall to allow communications to the services behind the firewall using these addresses and ports.

The process is similar when you configure your Crystal Enterprise system to communicate across SOCKS proxy filters. But Crystal Enterprise provides direct support for SOCKS proxy filters, so you need only configure each component to be aware of the location and type of the proxies that they communicate with.

Note:    When this section mentions firewalling different Crystal Enterprise components, it assumes that the components reside on separate computers. If the components reside on the same computer, their communication is uninterrupted by firewalls, and no additional configuration is required.

Related topics


Crystal Decisions
http://www.crystaldecisions.com/
Support services
http://support.crystaldecisions.com/