How does ArcGIS Insights Enterprise use a database connection?

Question

Hi all,

I have the required JDBC driver installed on all servers registered within my hosting server site and register the connection type via the server admin api (eg. SQL Server, HANA).

Within Insights, I make the database connection by filling out the required fields and connection to the database is successful.

This is a functionality type question relating to database connections used with ArcGIS Insights Enterprise (eg. within Portal). How does the web app communicate with the database? I'm looking at this from a cyber security point of view of where does the database ports need to be allowed to access to & from.

Example would be - In AWS allow TCP 1433 in/out for NACL between the subnets of the hosting server & database along with a security group for TCP1433, etc.

Thanks for anytime with this

ChakaClarke · Answer

Hi @AnthonyRyanEQL , Sorry for the delay in answering this question,

ArcGIS Enterprise
Assuming  you have ArcGIS Insights installed in you Enterprise Portal, if that is the case,

our JDBC connections use TCP/IP connection from ArcGIS Server to the database server name Specified, on the TCP/IP Port number, also specified when creating this connection:

Figure 1 Simple JDBC Connection Example

This will either be a straight TCP/IP socket for SQL server/Hana, But for Hana as the JDBC driver supports Secure Socket Layer (SSL) connection, in which case this is will be used, if the SSL Button is checked when creating the Hana Database connection to communicated between ArcGIS Server and Hana Cloud , the Transport Layer Secure (TLS)/Secure Sockets Layer (SSL) protocol to secure communication between the SAP HANA CLOUD database and ArcGIS Server.

Figure 2 Secure Socket Connection Example

ArcGIS Insights Desktop,

then the JDBC Connection is similar but from the client machine ArcGIS Insights Desktop is installed and the database server:
Connection Source: the Client machine location

Could be the IP address, when signed in

* at the office,
* VPN, or
* other possible locations the user would be expected to work from

TO

Connection Destination : Database server.

Let me know if this helps answer your question. Feel free to reach out for more information about other specific types of connections relevant to your working environment.
Cheers
Chaka Clarke
Senior Product Engineer at Esri
ArcGIS Insights

Akshay Harshe · Answer

Thanks for the information, I might have to refer you to my colleague who might have an answer for you. @ChakaClarke See if you can answer this!

AnthonyRyanEQL · Answer

Akshay,

The question is around database access/security. Our ArcGIS Enterprise instance is in AWS and users access the arcgis from the corporate network into AWS via Direct Connect. With this configuration, no user has direct database access (eg. database ports are blocked) to any databases hosted in AWS.

Based on this, how does ArcGIS Insights access data from a database when a user is interacting with the workbook/card, etc

Thanks