Kitaab

We faced issue where in Checkpoint IPS flagged certain traffic between ePO server and a remote repository (SuperAgent) and was rejected , thus causing file replication fail between ePO and SuperAgent over Port 8081 When we checked firewall for logs , it was particular identifying the traffic as SQL injection for HIPS content. As we checked HIPS content included files for HIPS and the ePO part that require SQL code for rules to be added / removed or modified in the ePO DB. In the end we had to put exception in IPS to  trust ePO traffic and everything worked fine. Hope this helps

If you wish to deploy a VM from template that resides on a host in one network to a host in another network across firewall you would need to open TCP/902 from the host where you have the Template to the one where you need to deploy the VM over. Hope this helps.