You are here: Workload protection > Virtual machine protection > Protect an entire physical or virtual machine using an ESX virtual machine > Firewall configurations for virtual ESX target workloads

Firewall configuration

If your source and target are on opposite sides of a NAT or firewall, you will need to configure your hardware to accommodate Double-Take Availability Virtual Recovery Assistant communications. You must have the hardware already in place and know how to configure the hardware ports. If you do not, see the reference manual for your hardware.

In a NAT or firewall environment, you must have a static mapping where a single, internal IP address is always mapped in a one-to-one correlation to a single, external IP address. Virtual Recovery Assistant cannot handle dynamic mappings where a single, internal IP address can be mapped to any one of a group of external IP addresses managed by the router.

Virtual Recovery Assistant ports
Microsoft Windows ports
Hardware ports

Next step: Connecting to the VirtualCenter server