[Installing Satellite Server in a connected network environment | Red Hat Satellite | 6.17 | Red Hat Documentation|https://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html-single/installing_satellite_server_in_a_connected_network_environment/index#Port_and_firewall_requirements_satellite]

Here are a couple of scenarios that would be helpful.

They are broken up so they match more what the firewall team wants to see.

Red Hat Satellite Firewall Scenarios

Scenario 1: Satellite and Clients

This scenario includes a Satellite server connected to the Internet and a set of client systems. The Satellite provides only content/patching services. There are two firewalls:

• FW1: Between Satellite and Internet
• FW2: Between Satellite and Clients
  Clients communicate directly with the Satellite.

Network Diagram:

FW1: Satellite → Internet

FW2: Clients → Satellite

Scenario 2: Satellite, Capsule, and Clients

This scenario includes a Satellite server, one or more Capsules, and client systems. The Satellite provides content to Capsules, and Capsules serve the clients. There are three firewalls:

• FW1: Between Satellite and Internet
• FW2: Between Satellite and Capsules
• FW3: Between Capsules and Clients
  Clients communicate only with the Capsules.

Network Diagram:

FW1: Satellite → Internet

FW2: Satellite ↔ Capsule

FW3: Clients → Capsule