Firewall Configuration for Use with Agents

The LiveVault Online Backup Service Agent uses a fixed TCP port to communicate with the LiveVault Internet Gateway (LVIG).

When you install LiveVault Online Backup Service Agent software on your server, a port selection utility in the Health Check utility (lvhealth) tests whether the LiveVault Online Backup Service Agent can communicate with its predetermined Primary and Backup LVIGs. 

To determine which TCP port to use for communication, the utility attempts to connect from the LiveVault Online Backup Service Agent to both LVIGs using the ports listed in the following table (in the sequence shown, i.e., 2147 is always tested first) :

The utility tests ports until it is able to connect with both the LVIGs. Typically the same port is able to be used to connect with both LVIGs. However, it is possible for your firewall rules to result in different ports being used.

The utility then records into the LiveVault Online Backup Service Agent's registry the port number, along with the corresponding Primary and Backup LVIG IP address.

The TCP port is fixed, unless you change it by doing one of the following:

• Manually editing the port information in the LiveVault Online Backup Service Agent's registry (see the section Registry Entry for Fixed TCP Ports below).

• Reinstalling the LiveVault Online Backup Service Agent, during which the Health Check utility runs again and may identify a different port to use.

• Manually running the Health Check utility (lvhealth) which may identify a different port to use.

If your LiveVault Online Backup Service Agent is not able to connect with either of its LVIGs, your firewall may be the source of the problem. If your firewall is the problem, then you must modify your firewall to allow the LiveVault Online Backup Service Agent to establish a session with its LVIGs.

Each firewall will have specific details that will need to be addressed by the system administrator. However many firewalls rules are composed in a format similar to the following:

Registry Entry for Fixed TCP Ports

To view or edit the fixed TCP ports for an LiveVault Online Backup Service Agent, run regedit on the LiveVault Online Backup Service Agent and do the following:

1. Go to HKEY_LOCAL_MACHINE\SOFTWARE\LiveVault Corporation\LiveVault.net\LVRT\Static Route.

2. Look at the values for PrimaryTunnelPort and BackupTunnelPort.

Proxy Firewalls

LiveVault Online Backup Service Agents and LVIGs cannot communicate through a Proxy firewall. However, many Proxy firewalls can be modified to allow access.

If you have Proxy servers, contact Customer Service. If you are running Microsoft Proxy Server 2.0 or ISA 2000, also see Microsoft Proxy Server 2.0 or Internet Security and Acceleration (ISA) Server 2000.