topic Re: Does Dynatrace SaaS need to call Environment ActiveGate over internet? in Open Q&A

Does Dynatrace SaaS need to call Environment ActiveGate over internet?

angus_bagchee — Thu, 12 Sep 2019 16:55:53 GMT

In configuring ActiveGate, is it necessary to expose ActiveGate to receive incoming request from Dynatrace SaaS? Or all comunication is initiated by the Environment ActiveGate (on port 443)?

Re: Does Dynatrace SaaS need to call Environment ActiveGate over internet?

jonathan_schull — Thu, 12 Sep 2019 18:13:32 GMT

Hello Angus,

Here is the documentation on all the network ports you may need to open for an Environment ActiveGate.

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/which-network-ports-does-activegate-use/

Cheers,
Jonathan

Re: Does Dynatrace SaaS need to call Environment ActiveGate over internet?

angus_bagchee — Thu, 12 Sep 2019 19:30:42 GMT

Thanks Jonathan! However, depending on if ActiveGate will need to receive requests from Dynatrace SaaS, it will have to be deployed in DMZ. The above link/document does not explicitly state that. Can it be assumed that ALL sessions are initiated by ActiveGate and not by Dynatrace SaaS?

Re: Does Dynatrace SaaS need to call Environment ActiveGate over internet?

Julius_Loman — Mon, 16 Sep 2019 08:47:16 GMT

Yes. The communication is always initiated from the ActiveGate to Cluster (SaaS in this case). This also applies for OneAgents. They connect to ActiveGate or to the Cluster directly (SaaS this case).