>Have you thought about having the clients in
>question being backed up directly to the internal TSM server? It would
mean
>having TCP ports 1500 and 1501 open.

Hi Mark

That was our first preference (seen from a functionality point of view),
however having those ports open from all the clients to the internal side
is unacceptable to the network security people since it would involve
having
to allow sessions being initiated from clients on the outside to the server
on
the inside and they will not allow outside initiated connections.

The solution with the external server placed between two firewalls and
other stuff
where you only needed to permit traffic from on IP to one IP on specific
ports
was the only way to transport data from the outside to the inside that
could be approved.

Regards

Peter