Basic firewall requirements for streaming media

The following table lists the basic tasks required for configuring transparent and nontransparent firewalls for streaming media.

Firewall type	Configuration requirements
Transparent firewall	Configure the firewall to allow the ports required for streaming media. No other specific Appliance Manager configuration is required.
Nontransparent firewall	Configure the firewall to allow the ports required for streaming media and include the firewall in the NetCache appliance hierarchy. To modify the request resolution hierarchy, configure the options on the Hierarchies pages in the Appliance Manager (Setup tab > Hierarchies). See the hierarchies chapter in the Administration Guide for more information.
Nontransparent firewall--IP multicast without tunneling	All requirements specified for nontransparent firewalls. In addition, verify that your network equipment supports multicast directly (without tunnels). For packet filtering purposes, the destination address range is 224.0.0.0 - 239.255.255.255.
Nontransparent firewall--IP multicast tunneling	All requirements specified for nontransparent firewalls. IP multicast tunneling is performed with IP-in-IP encapsulation. For packet filtering purposes, this is IP protocol number 4. To prevent a multicast tunnel from being used as a back door into or out of a network, verify that only multicast packets are allowed through the tunnel.

To learn about the ports that must be allowed for MMS, RealSystem, and QuickTime streaming, see the following sections: