Showing results for 
Show  only  | Search instead for 
Did you mean: 

OneAgent for Dynatrace SaaS


We are in a process of migrating to SAAS and setting up environment activegates which will be communicating to Dynatrace SAAS on port 443.

Do we also need to open firewall connection for oneagents to communicate with SAAS  instances on port 443 aswell?If so why do we need to open connection between oneagents and Dynatrace SAAS when activegates are present.



@tarun_kumar_aga Not required, OneAgents communicate directly with Dynatrace SaaS instances over port 443 to send monitoring data. Even ActiveGates also communicate with Dynatrace SaaS instances over port 443 for various management and monitoring tasks.

Therefore, if you have ActiveGates set up and configured properly, you may not need to open additional firewall connections specifically for OneAgents to communicate with Dynatrace SaaS instances. The communication flow between OneAgents, ActiveGates, and Dynatrace SaaS instances should be established through the ActiveGates.

Dynatrace Professional Certified

DynaMight Champion
DynaMight Champion

HI @tarun_kumar_aga ,

The ActiveGate (AG) acts as a proxy. They are the only devices that communicate with the SaaS instances.
They must be able to communicate in 443 with the IPs of your Dynatrace SaaS instances.
However, if you are "manually" injecting Javascript (for RUM) into your front web pages, you must also check that your fronts are able to send information to the SaaS via 443. (unless you have previously configured sending to a AG).
Agents (OA) only communicate with AG. Ports 9999 and 443 must be open between OA and AG.

Observability Consultant - Dynatrace Associate Certified

Just to complete @gbaudart answer you can check the documentation  




dynatrace certificated professional - dynatrace master partner - Matrix Soft Ware Division - Israel

Featured Posts