As I understand it, when a BLPackage is deployed to a managed server, the files are copied directly from the BladeLogic file server to the managed host. This means that if the file server can't communicate with the managed server due to firewall rules, your BLPackage deploys will fail.
In some instances this calls for a repeater, correct?
I'm working on a multi-network, multi-application server architecture and wanted to confirm this traffic flow.
It should go from the file server, through the appserver, to the target server. because like you state below, there may not be access from the file server to the target.
also, w/ 7.4 there are the network deploy jobs where the instructions will come from the appserver and the payload will from from a network share/mount.