Ports that need to be opened to collect from servers in a DMZ.
You need only to permit TCP connections on port 900 from agent to server. Unless the default port was changed during the install of InTrust. You don't have to explicitly open any other port in either direction, but the firewall must be configured to allow response traffic (Server -> agent) within the connection an agent establishes with server via port 900. Communications are always initiated by the agent but then, when the connection is established, communications are bidirectional.