How encryption in transit is enabled over port 9999 from one agent to activegate

[tarun_kumar_aga]

Hi,

We are frequently getting below question from our network team,Please provide configurations/screenshots showing encryption in transit is enabled over port 9999.

I didn't find any relevant documentation to provide them reference.

[Julius_Loman]

Unless you reconfigured the ActiveGate manually, there is https communication with TLS1.2 between ActiveGate and OneAgents.

[tarun_kumar_aga]

@Július L.

They are asking for some sort of reference documentation.i didn't find any.

Is there any way i can show them proof.

Thanks,

Tarun

[Julius_Loman · Accepted solution]

Look here, focus on ssl-protocols:
https://www.dynatrace.com/support/help/shortlink/sgw-configure#section-comcompuwareapmwebserver-

[Radoslaw_Szulgo · Accepted solution]

also here:

https://www.dynatrace.com/support/help/shortlink/sgw-types#route-oneagent-traffic-to-dynatrace-monit...

Authentication
ActiveGate authenticates OneAgent requests (SSL handshake and environment ID authentication).

And here:

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-activegate/configuration/co...

Communication between OneAgents and ActiveGate takes place over an encrypted HTTPS channel. ActiveGate provides an authentication certificate to all connecting clients. While OneAgent instances may ignore the validity of ActiveGate certificates (depending on configuration), connections from browser clients (such as the RUM JavaScript tag) do verify that the hostname listed in the certificate is correct, before they send data.