Does Dynatrace SaaS need to call Environment ActiveGate over internet?

[angus_bagchee]

In configuring ActiveGate, is it necessary to expose ActiveGate to receive incoming request from Dynatrace SaaS? Or all comunication is initiated by the Environment ActiveGate (on port 443)?

[jonathan_schull · Accepted solution]

Hello Angus,

Here is the documentation on all the network ports you may need to open for an Environment ActiveGate.

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/wh...

Cheers,
Jonathan

[angus_bagchee]

Thanks Jonathan! However, depending on if ActiveGate will need to receive requests from Dynatrace SaaS, it will have to be deployed in DMZ. The above link/document does not explicitly state that. Can it be assumed that ALL sessions are initiated by ActiveGate and not by Dynatrace SaaS?

[Julius_Loman]

Yes. The communication is always initiated from the ActiveGate to Cluster (SaaS in this case). This also applies for OneAgents. They connect to ActiveGate or to the Cluster directly (SaaS this case).