OneAgent for Dynatrace SaaS

[tarun_kumar_aga]

Hi,

We are in a process of migrating to SAAS and setting up environment activegates which will be communicating to Dynatrace SAAS on port 443.

Do we also need to open firewall connection for oneagents to communicate with SAAS  instances on port 443 aswell?If so why do we need to open connection between oneagents and Dynatrace SAAS when activegates are present.

[tijust1]

@tarun_kumar_aga Not required, OneAgents communicate directly with Dynatrace SaaS instances over port 443 to send monitoring data. Even ActiveGates also communicate with Dynatrace SaaS instances over port 443 for various management and monitoring tasks.

Therefore, if you have ActiveGates set up and configured properly, you may not need to open additional firewall connections specifically for OneAgents to communicate with Dynatrace SaaS instances. The communication flow between OneAgents, ActiveGates, and Dynatrace SaaS instances should be established through the ActiveGates.

[gbaudart · Accepted solution]

HI @tarun_kumar_aga ,

The ActiveGate (AG) acts as a proxy. They are the only devices that communicate with the SaaS instances.
They must be able to communicate in 443 with the IPs of your Dynatrace SaaS instances.
However, if you are "manually" injecting Javascript (for RUM) into your front web pages, you must also check that your fronts are able to send information to the SaaS via 443. (unless you have previously configured sending to a AG).
Agents (OA) only communicate with AG. Ports 9999 and 443 must be open between OA and AG.

[Yosi_Neuman]

Just to complete @gbaudart answer you can check the documentation  

HTH

Yos