Firewall configuration: Default ports
The following table describes the standard ports used by the Portal servers, the Data Collector servers, and any embedded third-party software products as part of a standard "out-of-the-box" installation.
Table: Components: Default Ports
| Component | Default Ports |
|---|---|
|
Apache Web Server |
http 80 https 443 |
Jetty Server on Data Collector Server | 443 |
Kafka | 9092 |
|
Linux Hosts |
SSH 22 |
|
Managed Applications |
Oracle ASM 1521 MS Exchange 389 MS SQL 1433 File Analytics CIFS 137, 139 |
|
Oracle Oracle TNS listener port |
1521 |
|
Tomcat - Data Receiver Apache connector port and shutdown port for Data Receiver instance of tomcat |
8011, 8017 |
|
Tomcat - Portal Apache connector port and shutdown port for Portal instance of tomcat |
8009, 8015 |
|
Windows Hosts |
TCP/IP 1248 WMI 135 DCOM TCP/UDP > 1023 SMB TCP 445 |
ZooKeeper | 2181 Note: IT Analytics uses standalone installation of single-node Apache ZooKeeper server. For secure communications, ZooKeeper single-node cluster must be protected from external traffic using network security such as firewall. This is remediated by ensuring that the ZooKeeper port (2181) is only accessible on the local host where IT Analytics Portal/Data Collector is installed (that includes Apache ZooKeeper). |
Table: Storage Vendors: Default Ports
| Storage Vendor | Default Ports and Notes |
|---|---|
|
Dell Compellent |
1433 SMI-S http (5988) SMI-S https (5989) |
|
Dell EMC Elastic Cloud Storage (ECS) |
REST API 4443 |
|
Dell EMC Unity |
REST API version 4.3.0 on 443 or 8443 |
|
EMC Data Domain Storage |
SSH 22 |
|
EMC Isilon |
SSH 22 |
|
EMC Symmetrix |
SymCLI over Fibre Channel 2707 |
|
EMC VNX |
NaviCLI 443, 2163, 6389, 6390, 6391, 6392 |
|
EMC VNX (Celerra) |
XML API 443, 2163, 6389, 6390, 6391, 6392 |
|
EMC VPLEX |
https TCP 443 |
|
EMC XtremIO |
REST API https 443 |
|
HP 3PAR |
22 for CLI |
|
HP EVA |
2372 |
|
HPE Nimble Storage |
5392, REST API Reference Version 5.0.1.0 |
|
Hitachi Block Storage |
TCP 2001 For the HIAA probe: 22015 is used for HTTP and 22016 is used for HTTPS. |
|
Hitachi Content Platform (HCP) |
SNMP 161 REST API https 9090 |
|
Hitachi NAS (HNAS) |
SSC 206 |
Hitachi Vantara All-Flash and Hybrid Flash Storage | Hitachi Ops Center Configuration Manager REST API: 23450 for HTTP and 23451 for HTTPS. HIAA : 22015 for HTTP, and 22016 for HTTPS |
|
IBM Enterprise |
TCP 1751, 1750, 1718 DSCLI |
|
IBM SVC |
SSPC w/CIMOM 5988, 5989 |
|
IBM XIV |
XCLI TCP 7778 |
|
Microsoft Windows Server |
2016 WMI 135 DCOM TCP/UDP > 1023 |
|
NetApp E-Series |
SMCLI 2436 |
|
NetApp ONTAP 7-Mode and Cluster-Mode |
ONTAP API 80/443 |
|
Pure Storage FlashArray |
REST API https 443 |
Table: Data protection: Default ports
| Data Protection Vendor | Default Ports and Notes |
|---|---|
|
Cohesity DataProtect |
REST API on Port 80 or 443 |
|
Commvault Simpana |
1433, 135 (skipped files) 445 (CIFS over TCP) DCOM >1023 |
Dell EMC Networker Backup & Recovery | Port used for Dell EMC NetWorker REST API connection. Default: 9090. |
|
EMC Avamar |
5555 SSH 22 |
|
EMC Data Domain Backup |
SSH 22 |
|
HP Data Protector |
5555 WMI ports SSH 22 (Linux) |
|
IBM Spectrum Protect (TSM) |
1500 |
NAKIVO Backup & Replication | Director Web UI port (Default: 4443) |
|
Oracle Recovery Manager (RMAN) |
1521 |
|
Rubrik Cloud Data Management |
REST API 443 |
|
Veeam Backup & Replication |
9392 |
Table: Network & Fabrics: Default Ports
| Network & Fabrics Vendor | Default Ports and Notes |
|---|---|
|
Brocade Switch |
SMI-S 5988/5989 |
|
Cisco Switch |
SMI-S 5988/5989 |
Table: Virtualization Vendors: Default Ports
| Virtualization Vendor | Default Ports and Notes |
|---|---|
|
IBM VIO |
SSH 22 |
|
Microsoft Hyper-V |
WMI 135 DCOM TCP/UDP > 1023 |
|
VMware ESX or ESXi,vCenter,vSphere |
vSphere VI SDK https TCP 443 |
Table: Replication Vendors: Default Ports
| Replication Vendor | Default Ports and Notes |
|---|---|
|
NetApp ONTAP 7-Mode |
ONTAP API 80/443 |
Table: Cloud Vendors: Default Ports
| Cloud Vendor | Default Ports and Notes |
|---|---|
|
Microsoft Azure |
https 443 |
|
OpenStack Ceilometer |
8774, 8777 Keystone Admin 3537 Keystone Public 5000 |
|
OpenStack Swift |
Keystone Admin 35357 Keystone Public 5000 SSH 22 |
Google Cloud Platform | https 443 |