http://blogs.technet.com/b/dpm/archive/2011/06/28/how-to-limit-dynamic-rpc-ports-used-by-dpm-and-protected-servers.aspxThe large range of ports used by dynamic RPC can pose a problem when attempting to allow communication through a firewall. In most cases, opening up 16,000 ports in the firewall to allow some application traffic is not feasible.&#160; So if IPSec is noten-USTelligent Evolution Platform Developer Build (Build: 5.6.50428.7875)http://blogs.technet.com/b/dpm/archive/2011/06/28/how-to-limit-dynamic-rpc-ports-used-by-dpm-and-protected-servers.aspx#3509805Thu, 19 Jul 2012 16:23:59 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3509805Timothy<p>DPM needs some sort of RPC proxy, like Exchange. &nbsp;This is such a huge pain to have to configure and deploy to every single server just so that a secondary DPM server in the cloud we have deployed can back up resources from the primary server.</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3509805" width="1" height="1">http://blogs.technet.com/b/dpm/archive/2011/06/28/how-to-limit-dynamic-rpc-ports-used-by-dpm-and-protected-servers.aspx#3463377Fri, 04 Nov 2011 19:51:53 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3463377Richard Hicks<p>Excellent reference. I&#39;ve updated my blog post on configuring SCDPM to protection Forefront TMG 2010 firewalls. </p> <p><a rel="nofollow" target="_new" href="http://tmgblog.richardhicks.com/2010/12/21/configuring-forefront-tmg-for-microsoft-system-center-data-protection-manager-dpm-2010/">tmgblog.richardhicks.com/.../configuring-forefront-tmg-for-microsoft-system-center-data-protection-manager-dpm-2010</a></p> <p>Thanks!</p> <div style="clear:both;"></div><img src="http://blogs.technet.com/aggbug.aspx?PostID=3463377" width="1" height="1">