Alert Forwarding Across Firewalls May Not Work as Expected (300351)



The information in this article applies to:

  • Microsoft Operations Manager 2000

This article was previously published under Q300351

SYMPTOMS

When Microsoft Operations Manager (MOM) is configured to forward alerts from a Database Access Server/Consolidator-Agent Manager (DCAM) that is on one side of the firewall (the zone configuration group) to a DCAM on the other side (the master configuration group), the alerts may not be forwarded.

CAUSE

This behavior can occur for the following reasons:
  • The zone DCAM cannot set alert forwarding because zone DCAM makes Distributed Component Object Model (DCOM) calls to the master DCAM during the setup process and the firewall may prevent DCOM traffic.
  • The zone DCAM cannot send alerts to the master DCAM because secure port 1270 (default port for alert forwarding traffic) or a secure port that the DCAMs have been set to use are not open for communication through the firewall.

WORKAROUND

To work around this issue:
  1. Install the DCAMs on the same side of the firewall.
  2. Configure alert forwarding between the two, defining one of the DCAMs as a Zone DCAM and the other as the Master DCAM.
  3. Test communication between the two DCAMs.
  4. Set up the firewall between the two DCAMs, making sure that you keep the MOM secured port (port 1270 by default) open for communication.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Modification Type:MinorLast Reviewed:6/13/2005
Keywords:kbbug kbnetwork KB300351