Hi Andy,

thanks for this hint, I have tried this already.
It looks like the MS ForeFront doesn't care about definitions that have
been made in normal 'Windows 2008 Firewall with Advanced Security'.

Best regards,
Rainer

> -----Original Message-----
> From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf
> Of Huebner,Andy,FORT WORTH,IT
> Sent: Friday, February 11, 2011 4:42 PM
> To: ADSM-L AT VM.MARIST DOT EDU
> Subject: Re: [ADSM-L] TSM for Windows (2008 R2) client 6.2.2.0 and
> ForeFront 2010 upd.2
>
> If you look at your firewall logs you will see that the see the
> connection from the TSM server is being dropped.  Be sure to add the
> CAD to the firewall.  We had this problem when we first started
> backing up 2008 servers.
>
> ** use at your own risk **
> This is useful for punching holes in the MS firewall on 2008:
> netsh advfirewall firewall add rule name="IBM Tivoli Storage Manager
> CAD" dir=in program="C:\program files\tivoli\tsm\baclient\dsmcad.exe"
> action=allow
>
> Andy Huebner
>
> -----Original Message-----
> From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU] On Behalf
> Of Rainer Holzinger
> Sent: Friday, February 11, 2011 8:06 AM
> To: ADSM-L AT VM.MARIST DOT EDU
> Subject: [ADSM-L] TSM for Windows (2008 R2) client 6.2.2.0 and
> ForeFront 2010 upd.2
>
> Hello all,
>
>
>
> I'm having 3 new Windwos 2008 R2 (64-bit) servers with TSM for Windows
> cleitn version 6.2.2.0 installed.
>
> The TSM clients are within a DMZ as well as the TSM servers. TSM
> client
> acceptor daemon is implemented to manage the TSM cleitn scheduler as
> well as the WEB client. On all three machines there is MS ForeFront
> 2010
> upgrade 2 installed which is a MS firewall, most likely replaceing the
> formerly ISA product from Microsoft.
>
> All three TSM clients are configured with 'schedule mode = prompted'.
> For some unkonwn reason the TSM server is not prompting the TSM
> clients
> to start the backlup operations. However, when I'm restarting the TSM
> CAD service the backup begins, but just this one. Later scheduled
> backups do not start again as before. So it looks like only the TSM
> client is able to start a session with the TSM server. We have applied
> some 'inbound rules' aleady to the MS ForeFront configuration to allow
> all traffic for the backup network, tcpip ports 1500-1599 and the
> whole
> backup network as well without any success. We have also de-installed
> the MS ForeFront software again to see is this is really causing the
> problem. Without MS ForeFront, no problem.
>
> Is there anybody out there, using this or a similar environemt who had
> experienced the same problems or better is abel to provide a solution
> or
> further debigging hints?
>
>
>
> Thanks in advance and have nice weekend,
>
> Rainer
>
>
>
>
>
> RHo-Consulting
>
> Rainer Holzinger
>
> Bachstr. 10
>
> D-93105 Tegernheim
>
> phone:   +49 9403 969174
>
> mobile:  +49 162 2807 888
>
> email:     <mailto:RainerHolzinger AT gmx DOT de> RainerHolzinger AT gmx DOT 
> de
>
>
>
> CONFIDENTIALITY NOTICE:
>
> This e-mail is confidential and may also be privileged. If you are not
> the intended recipient, please notify the sender IMMEDIATELY; you
> should
> not copy the e-mail or use it for any purpose or disclose its contents
> to any other person.
>
>
>
> VIRUSES:
>
> Although there have been taken steps to ensure that this e-mail and
> attachments are free from any viruses, the recipient should at its
> sole
> discretion take the necessary measures to ensure that the received
> messages are actually virus free.
>
> This e-mail (including any attachments) is confidential and may be
> legally privileged. If you are not an intended recipient or an
> authorized representative of an intended recipient, you are prohibited
> from using, copying or distributing the information in this e-mail or
> its attachments. If you have received this e-mail in error, please
> notify the sender immediately by return e-mail and delete all copies
> of this message and any attachments.
>
> Thank you.