V11 SP8

Setting up a One-Way Firewall (Client to Server) Using a Predefined Firewall Topology

You can create a topology instance where members of one client group can establish a connection to members in another client group.

Use this configuration on firewall environments where the client initiates connections to one or more of server computers, such as the CommServe computer or MediaAgent.

Before You Begin

  • Make sure that the client groups that you want to use in the firewall topology instance are already defined in the CommCell Console.
  • You must have Administrative Management permissions on the client groups that you plan to use in the firewall topology instance.


  1. From the CommCell Browser, right-click Firewall Topologies > New Topology.

    The Firewall Topology dialog box is displayed.

  2. In the Topology Name box, enter a name for this instance of a one-way firewall.
  3. Optional: In the Description box, enter a description for this topology.
  4. For Topology Type, click One-Way.
  5. From the Infrastructure Client Group list, select the client group that will initiate connections with members of the DMZ Client Group.
  6. From the DMZ Client Group list, select a client group that will receive connection requests from members of the Infrastructure Client Group.
  7. Click OK.
  8. From the CommCell Browser, right-click the new_topology and click Push Firewall Configurations.

What to Do Next

  1. Install the Commvault software on the clients that will be part of the firewall topology. If the software is already installed, skip this step.

    For firewall instructions during the installation, see Setting Up Direct Connections from the Client to the CommServe Computer.

  2. From the CommCell Browser, right-click the firewall topology that you configured, click Push Firewall Configurations, and then click OK.