[AG-TECH] Firewall and unicast questions

[NamGon Kim]

Dear Chris,

My name is Namgon Kim.
I am developing a multicast connectivity solution for AG which can be
used under firewall.
AG Connector is the name of my solution.
I hope you to test AG Connector in your network.

It encapsulates multicast data of AG and uses one port number (8010) for
connection with outside of firewall.

If you use AG Connector, since what you need to do is opening 8010 port,
firewall traversal will be easier.

Your can download and see some documentation from here.
http://ace.nm.gist.ac.kr/AG_Connector/

If you need any question about AG Connector, let me know.

- Namgon


> -----Original Message-----
> From: Masullo, Chris F [mailto:masullo at bnl.gov]
> Sent: Friday, April 07, 2006 1:04 AM
> To: ag-tech at mcs.anl.gov
> Subject: [AG-TECH] Firewall and unicast questions
> 
> Hello All,
> 
> We currently have our AG nodes outside our firewall, however cyber
> security
> has told us that we need to move the systems inside our firewall.  The
> last
> time I brought up this issue a number of years ago I was told that
> multicast
> would not get past our firewall. I have some questions regarding this
> issue.
> 
> Has anyone successfully placed an AG VTC system behind a Cisco
Firewall?
> Are there any issues using unicast mode for and AG node behind a
> firewall?
> If not then why not run unicast?
> 
> I have looked through the mailer however I do not see any answers to
> these
> Questions.
> 
> Thanks in advance
> 
> 
> 
> Chris Masullo                     Information Technology Division
> Brookhaven National Laboratory    Network Engineering & Operations
> 61 Brookhaven Ave.                Phone:  (631) 344-2326
> Upton, NY 11973                   Fax:    (631) 344-7688