SunScreen 3.1 Administration Guide

CMG Requirements

Many configurations require cluster members to pass through a firewall in order to communicate with the Primary Screen. In these configurations, any firewall being traversed must contain packet filtering rules to allow certain traffic from the Primary Screen to pass through its interfaces to the Secondary Screen. These rules need to include the following services: