topic Re: One-way-synchronisation using Distributed Collaboration? in ArcGIS Enterprise Portal Questions

One-way-synchronisation using Distributed Collaboration?

MichaelNüßlein — Mon, 18 Jan 2021 10:20:02 GMT

We'd like to put a master-Portal in the intranet and a slave-Portal in the DMZ.

Is it possible to synchronise the slave using Data-Collaboration, only opening Ports from Intranet to DMZ?

There should be no datastream-initiation from DMZ to intranet.

Klaus

Re: One-way-synchronisation using Distributed Collaboration?

CraigRussell — Mon, 18 Jan 2021 12:05:56 GMT

Hi Klaus

In this instance your DMZ Portal will be the host and your Intranet Portal would be the guest. The guest initiates all communication (outbound over port 443) whether it is two way (push/pull) or one way (push only).

Craig

Re: One-way-synchronisation using Distributed Collaboration?

MichaelNüßlein — Tue, 19 Jan 2021 07:18:44 GMT

Hi Craig

thank you for your answer.

So this means:

We can run a high-available Portal (two Portals with loadbalancer) as host which will receive updates from high-available Portal (two Portals with loadbalancer) as guest?

Klaus

Re: One-way-synchronisation using Distributed Collaboration?

MichaelNüßlein — Wed, 27 Jan 2021 09:06:47 GMT

The communication is bidirectional:

when uploading the invite-file and also when uploading the response-file, in both cases, the https-certificate of the other server is checked.
Or can i tweak this, that it will not be checked?

Re: One-way-synchronisation using Distributed Collaboration?

CraigRussell — Fri, 29 Jan 2021 04:25:04 GMT

Establishing trust is not the same as bidirectional communication. The invitation cannot be accepted if the SSL certificate of the host isn't trusted; if you're getting an error then you'll have to import the root/intermediate certificates into your Portal - Configuring the portal to trust certificates from your certifying authority—Portal for ArcGIS | Documentation for ArcGIS Enterprise