Software firewall configuration in the virtual appliance

Before you start the installation of IBM Security Identity Manager virtual appliance, check the considerations for the port numbers, apart from host names, user accounts, and fix packs.

Having a software firewall on the virtual appliance helps to control only the necessary ports for IBM Security Identity Manager to work.

IBM Security Identity Manager hides all the unwanted ports and provides only those ports required by the virtual appliance. Use the default ports for a standard installation on a clean computer. For advanced or custom deployments, we might have to use different port numbers. If you intend to use the default ports, ensure that the port is not yet assigned and are available before we use the product installation program.

Table 1 describes a list of available ports that we can use to work with ISIM virtual appliance:

Port numbers Used by
22 Secure Shell (SSH)
161 SNMP server, if configured
443 Secure appliance management interface
1098 Security Directory Integrator web server port
1099 RMI Dispatcher service
9056 Cluster Manager secure administrator host
9057 Cluster Manager bootstrap address
9058 Cluster Manager soap port
9061 Cluster Manager CSIV2 SSL server authentication listener address
9062 Cluster Manager CSIV2 SSL mutual authentication listener address
9063 Cluster Manager ORB Listener
9064 Cluster Manager cell discovery address
9065 Cluster Manager DCS Unicast address
2809 Nodeagent bootstrap address
5001 Nodeagent IPv6 multicast discovery address
7272 Nodeagent node discovery address
8878 Nodeagent soap port
9201 Nodeagent CSIV2 SSL server authentication listener address
9202 Nodeagent CSIV2 SSL mutual authentication listener address
9353 Nodeagent DCS Unicast address
9900 Nodeagent ORB Listener
9067 Application server bootstrap port
9068 Application server SOAP port
9069 Application server ORB Listener
9071 Application server CSIV2 SSL mutual authentication listener address
9072 Application server CSIV2 SSL server authentication listener address
9073 Application server DCS Unicast address
9082 Application port
9089 Application server SIB secure address
9092 Message Server bootstrap port
9093 Message Server soap port
9094 Message Server ORB listener
9096 Message Server CSIV2 SSL mutual authentication listener address
9097 Message Server CSIV2 SSL server authentication listener address
9112 Message Server DCS Unicast address
9102 Message Server secure default host
9109 Message Server SIB endpoint secure address

Parent topic: Install