# Configuring the Firewall on DirectAgent Installer

LSA uses the SMI-S Provider to discover and manage its storage controllers on the VMware environment. To discover the ESXi servers where SMI-S Providers are available, LSA uses the SLP as a discovery mechanism. CMISLP advertises and allows remote systems to discover CIM servers. CIMHttpServer is a CIM server and is required to interact with the SMI-S Provider.

You can configure the DirectAgent installer firewall in the VMware environment.

To check whether the firewall is enabled, execute the following command:

esxcli network firewall get

If the firewall is enabled, CIMSLP services should be enabled in the rule set. To check whether CIMSLP services are enabled in the rule set, execute the following command:

esxcli network firewall ruleset list

If the rule ID of CIMSLP is set to false, CIMSLP is disabled, and LSA will be unable to discover the CIM service. To enable the CIM service, execute the following command:

esxcli network firewall ruleset set --enabled true --ruleset-id=CIMSLP

Similarly, CIMHttpServer should be enabled, so that it can interact with the SMI-S Provider.

Parent topic: Configuring the Firewall on Various LSA Installers