The TCPCLIENTPORT is used in a PROMPTED scheduling mode and the Installing
the clients manual states that TSM only supports doing scheduled backups
through a firewall in POLLING mode. So opening 1501, or whatever
TCPCLIENTPORT you specify is not needed. You just need to open up port 1500
for the clients to contact the TSM server. You can narrow this down with
rules so only these clients can connect via port 1500 only to the TSM server
address. You can also NAT the TSM server address on the outside of the
firewall.

But to do backups through a firewall all you need is SCHEDMODE POLLING and
port 1500.

Bill Boyer
DSS, Inc.