Previous Topic: Specify the Firewall RulesNext Topic: Windows


Configure the Hosts File for Firewalls that use Network Address Translation

This step is required only if the BusinessObjects Enterprise servers must communicate across a firewall on which Network Address Translation (NAT) is enabled. This step allows the client computers to map a server's hostname to a routable IP address.

This step is required in addition to the steps described in To configure the system for firewalls.

Note: BusinessObjects Enterprise can be deployed on computers that use Domain Name System (DNS). In this case, the server computer host names can be mapped to externally routable IP address on the DNS server, instead of in each computer's hosts file.

Understand Network Address Translation

A firewall is deployed to protect an internal network from unauthorized access. Firewalls that use NAT map the IP addresses from the internal network to a different address that is used by the external network. This address translation improves security by hiding the internal IP addresses from the external network.

BusinessObjects Enterprise components such as servers, rich clients, and the web application server hosting the BusinessObjects Enterprise SDK use a server reference to contact a server. The server reference contains the hostname of the server's computer. This hostname must be routable from the BusinessObjects Enterprise component's computer. This means the hosts file on the BusinessObjects Enterprise component's computer must map the server computer's hostname to the server computer's external IP address.

The server computer's external IP address is routable from external side of the firewall, whereas the internal IP address is not. The procedure for configuring the hosts file is different for Windows and UNIX.