NetBackup SAN clients require connectivity to the NetBackup master server and the NetBackup Enterprise Media Manager server.

Therefore, you must ensure that any firewall (software or hardware) allows the clients to communicate with the NetBackup master server and the EMM server. Normally, the NetBackup master server hosts the EMM server, so you may only have to allow communication with one system.