1 Reply Latest reply on Mar 26, 2019 5:59 AM by Simon Chang

    Where is the documentation for the BMC download FTP sites, either EPD or filedownload, for what we need in our firewall?

    Jerome Vitner
      Share This:

      I am trying to download z/OS maintenance and I am getting firewall blockages for both epddownload.bmc.com and filedownload.bmc.com when attempting to start a data connection. Typically there is a high port range for the data connection that must be defined to the firewall. I can't find any documentation when I search.

        • 1. Re: Where is the documentation for the BMC download FTP sites, either EPD or filedownload, for what we need in our firewall?
          Simon Chang

          Hi Jerome

           

          I understand that bmc support responded to your request, for the record here is the detail:

           

           

          The epddownload.bmc.com domain that is used by the installation system for product download and cumulative RSL distributions has the following characteristics:

          epddownload.bmc.com support FTP protocol listening on port 21 and support connections in active, passive, and active passive mode.

          The port range for passive/extended passive connection is 64535-65535.

          The epdownload.bmc.com service has load balancing characteristics and more than one IP address.

           

          We also support two secure FTP protocols (sftp/ftps) in addition to standard ftp on filedownload.bmc.com domain.   Filedownload.bmc.com can be used with the installation system(product installs and cumulative RSL) and is the host for the BMC Internet Service Retrieval (ISR) service.

          ftp on fieldownload.bmc.com listening port 21 and passive/extended port range 64535-65535

          ftps is listening on port 21 with same ranges.  The EV certificate can be downloaded from ftp credentials page on support central.

           

          https://www.bmc.com/support/reg/esd-password.html

           

          sftp is listening on port 22.  Keygen/keyscan/known host setup must be completed prior to connecting.

          The installation system and BMC ISR have been updated with secure FTP options and will generate JCL to use filedownload.bmc.com when the user selects the secure FTP protocols.

           

          Regards

          Simon

          1 of 1 people found this helpful