Geert - Some further info on your firewall problem... Your posting did not specify your software levels, but look into IBM site Technote 1109798 ("How to make use of "keepalive" network option with TSM clients") which is new as of August.
Richard Sims