topic Re: What Ports besides 5151 need to be opened in a firewall; SDE 10 in Data Management Questions

What Ports besides 5151 need to be opened in a firewall; SDE 10

JoeBorgione — Thu, 12 Jan 2012 20:29:13 GMT

I'm in process of developing an ArcGIS Server/SDE instance in 10.0 (I know, it's about time!). However, remote users are not able to get connected. Ports 5150 through 5159 are open on the firewall, and remote users have never had a problem with the 9.3(.1) instances. One colleague mentioned that when they went to 10.0 with Oracle (I'm running Sql Server 2008) her systems guys had to open up additional ports, but she couldn't remember which.

I should mention that I don't have a problem connecting through the local network.

Has anyone else had a similar issue? Are there additional ports that need to be opened? I'm not a firewall guy, but what can I tell the firewall guy to listen for and where?

Any help and advice are appreciated!

Re: What Ports besides 5151 need to be opened in a firewall; SDE 10

VinceAngelo — Thu, 12 Jan 2012 20:47:39 GMT

You only need 5151/tcp open if you're using it as an application server endpoint. Direct Connect
connections use whatever the RDBMS uses. The default ports are documented, but some sites
use alternate ports, so you really need to inspect the configuration.

- V

Re: What Ports besides 5151 need to be opened in a firewall; SDE 10

JoeBorgione — Fri, 13 Jan 2012 09:53:20 GMT

Thanks Vince; I used a direct connect internally which worked fine. The remote users are not using a direct connect. I'll be back on site Monday and see what we can figure out.

Re: What Ports besides 5151 need to be opened in a firewall; SDE 10

VinceAngelo — Fri, 13 Jan 2012 11:36:10 GMT

In the long run, external users really ought to be using a SSL/VPN solultion, since SSL
also provides greater security than a firewall, reduces the risk of a DOS attack, and
encrypts the data in transit.

- V