Most firewalls are configured to deny incoming network connections unless access is explicitly granted. Systems running HTAR or HSI (with Firewall Mode set to off) must accept network connections which are initiated by the HPSS Movers at NERSC. By default HSI is configured with Firewall Mode set to on and will usually work without any firewall changes. To configure your system to allow connections from HPSS Movers at NERSC, you will need to grant access for TCP connections originating from the 18.104.22.168/24 network. If you have used the HSI/HTAR Configure script to specify a port range for connections you can further limit access to the port range you set with the 'Mover Port Range' option. Please contact your network or system administrator if you need further assistance.