The port needed would be just 1521. If your firewall is provided by Cisco then you need to disable some things like SQL inspection and a few more. There is a metalink doc which mentions this. Just do a metalink search for "SQL Inspection Cisco". With Regards, Sreejith -- Sent from my iPhone On 26-Jan-2012, at 9:51 PM, fmhabash <fmhabash@xxxxxxxxx> wrote: > Need to create a managed recovery standby (not a full DG configuration) > where a firewall falls between primary and standby. Planning to tunnel > traffic through ssh. Are there any other ports besides the listener that > needs to be opened. > > Thank you. > -- > //www.freelists.org/webpage/oracle-l > > -- //www.freelists.org/webpage/oracle-l