Have a relay in the DMZ and need to know what ports on the firewall need to be opened.
80 - TCP - Relay Port - Client > Relay
443 - TCP - Relay Port - Client > Relay
1099 - TCP - RMI port - Loader <> Relay
3390 - TCP - Proxy port (If using Proxy webapps) - Client > Relay
4500 - TCP - Service port - Loader <> Relay
4501 - TCP - Pipeline port - Loader <> Relay
8090 - TCP - Management Port
16000 - TCP - Cluster Port - Loader <> Loader
16010 - TCP - Cluster Connection Port - Loader <> Loader
24000 - TCP - Relay Central port - Loader <> Relay
49152-65535 - TCP - AD LDS Replication
If you configure any Dedicated Port Maps or Citrix Proxy/RDP Proxy webapps, then you would need to also open the ports that you selected for these web applications.
If you are using Windows and want to be sure the Windows Firewall is configured to allow these ports you can use the following commands in an Administrative Command Prompt :
Adding UW Java exception to firewall:
netsh advfirewall firewall add rule name="Allow inbound traffic to webNetwork Java" dir=in edge=yes action=allow program="C:\UnifiedWorkspace\jre\bin\java.exe" enable=yes
Adding webNetwork.exe exception to firewall:
netsh advfirewall firewall add rule name="Allow inbound traffic to webNetwork.exe" dir=in edge=yes action=allow program="C:\UnifiedWorkspace\bin\webNetwork.exe" enable=yes