If you're using default configuration the CM and clients use port 5555/TCP for communication. The ports used for data transfer are dynamic what makes trouble with firewalls. The best practice is, to place a media agent with direct tape access (local or…