One Way Firewall

Hi Guys,

Please someone help me with Commvault document to create One-Way firewall between Commserve and Media agent ?

Also, which server we need to keep blocked state and which 1 in restricted state ? What is the logic behind choosing which server to block and which server to keep in restricted state.