As far as I understand, the jmx.port setting in catalina.properties sets the port for the RMI registry for the remote JMX access.
Java uses per default a dynamic port for the management RMI server, which makes it impossible to create firewall exceptions.
Is this port dynamic with tcServer too? Or is it possible to use a static port? If so, is it configurable or implicit (maybe one off the registry port)?