| Product Documentation
AD Self Service Portal
Firewall Ports
The communication matrix for all the AD Self-Service Portal components is given below:
| AD Self Service Components Communication | ||||||||
| Sr. No | ADSS Plus communication | Source IP Server | Destination IP Server | Destination Ports | Firewall Rules | Service Account | Further Details | Purpose |
| 1 | AD Self Service Portal accessible over secure SSL web browsers (and API hub can be accessed by agent server) | Mediation Server (Agent) | Portal Server |
• 443 (Public)
• 8778 (Portal IP)
• 8779(API/Hub)
|
Inbound ports need to be opened |
• ADSS Health Service
• ADSS Portal Hub Service
• ADSS Portal Misc Tasks Service
|
• API hub installed on Control Server communicates with Agent |
• To manage users and roles
• To show different reports
• To manage global configurations for all connected agents (AD Entities)
• To provide centralized management
• Audit logs
• API hub serves as an interface for communication between agent and portal
|
| 2 | AD Self Service Mediation Agent | Portal Server | Mediation Server (Private Entity) | • 8779 | Inbound ports need to be opened | • ADSS Agent Service | • ADSS Agent communicates with API hub installed on Control Server on port 8779 |
• Agent communicates with API hub without interfering with the ADSS portal communication.
• Includes audit logging, error logs, etc. via the API hub
|
| 3 | Domain Controller | Mediation Server | Domain Controller |
• 389 LDAP
• 636 LDAPS
• 3268 Global Catalog
|
Inbound rule for allowing AD server to allow Global Admin and Entity Admin logins | • Active Directory Services | • For authentication of Portal Admin and Entity Admin users. | |
| 4 | Database Server | Portal Server | Database Server | • 1433 |
Inbound rule for allowing SQL
server port
|
• SQL Server Service
• SQL Browser Service
|
• For remote connectivity of the SQL server, the SQL Browser service must be in a running state | • Serves as the database for the ADSS solution. |