OneAgent firewall rules (SaaS deployment)

[kalle_lahtinen]

Hi,

The OneAgent installation documentation states:

"All hosts that are to be monitored need to be able to send data to the Dynatrace cluster."

I wish this was a bit more accurate... Can I open the outgoing ports 443 and 8443 towards a specific name or subnet, or do I need to allow it for all destinations?

Br,

Kalle

[JamesKitson · Accepted solution]

In the installer screens that are specific for your environment it will tell exactly which IP addresses need to be be reachable:

[kalle_lahtinen]

Alright, so it varies case by case and that's why it wasn't documented more precisely. Fair enough, thanks for the response!

[jaroslaw_orlows]

anonymous user, thanks for finding this. I think we can still do a better job explaining this. Since we already mention this requirement, we can also provide a quick hint where to get addresses for the whitelist from. Will add it the doc. Thanks!

[vivek_vasukutta]

What is the port number?

[Iplinsky · Accepted solution]

The following ports:

9999 for activegate (InBound)

443/8443 for OneAgent (Outbound)