Sage 200 On Premise
Security and firewall settings
Sage 200 uses a combination of Windows security and SSL certificates to secure communications between the Sage 200 server and client machines.
Windows File Permissions
Domain
When deployed in an Active Directory Domain environment the central Sage file share (e.g. c:\Sage) and associated files and subdirectories have their permissions set to restrict access to specific
Sage 200 user and admin groups.
Workgroup
When deployed in a Windows workgroup environment the central Sage file share (e.g. c:\Sage) and associated files and subdirectories have their permissions set to Everyone | FullControl. We recommend that you set the Share and Security permissions as follows: n
Set the Share permissions to
FullControl/Change/Read
for these users: n
Sage 200 Administrators group n
Sage 200 Users group n
Sage 200 Services user n
Sage 200 Secured Services user n
Set the Folder Security to
Modify/Read&Execute/ListFolderContents/Read/Write
for these users: n
Sage 200 Administrators group n
Sage 200 Users group n
Sage 200 Secured Services user
Note:
Once you have installed Sage 200, restart the machine before you access System
Administration . This is so the security permissions are set correctly.
Required Firewall Settings
Sage 200 runs a variety of programs and services that can be affected by security firewall settings.
The following table details the ports that need to be opened in order for Sage 200 to function correctly.
Server
Database Server (Default SQL
Port
TCP Port 1433
Details
Default SQL Instance
38
3 | Deploying Sage 200 across a network
Server
Instance)
Database Server (Named SQL instance)
Sage 200 File Server
Port
UDP Port 1434
Details
Named SQL Instance
Sage 200 Application Server
Sage 200 Self Service
Sage 200 CRM Server
TCP Port 139
TCP Port 445
TCP Port 137
TCP Port 138
TCP Port 10443
TCP Port 10444
TCP Port 80
TCP Port 443*
File & Print Sharing
File & Print Sharing
File & Print Sharing
File & Print Sharing
HTTPS
HTTPS
HTTP
HTTPS
You will need to open port 443 and grant permission for https://licensing.services.sage.com
and www.google.com. Google needs to be allowed as when it checks the licence, it pings
Google to ensure there is an internet connection prior to going to the licensing server.
The following ports are required for Sage 200 Business Intelligence:
Server
Database Server (Default SQL
Instance)
Database Server (Named SQL
Instance)*
Port
TCP Port 2383
TCP Port 2382
Details
SQL Analysis Services
SQL Analysis Services
UDP Port 1434 SQL Browser Service
* For more information see, http://msdn.microsoft.com/en-us/library/ms174937.aspx#bkmk_ named .
Additional firewall settings if you have a named SOL instance or dynamic ports
Follow the steps below if you have named SOL instance or are using dynamic ports:
1. Find the port number: a. Open
Start > All Programs > Microsoft SQL Server
version
> Configuration
Tools > SQL Server Configuration Manager
.
39
Sage 200 On Premise b. Select
SQL Server Network Configuration > Protocols for
<your instance
Name>
.
c. Right-click
TCP/IP
and select
Properties
.
d. Select the
IP Addresses
tab and scroll down to the
IPAll
group.
e. The current port is the
TCP Dynamic Ports
number.
2. Set your Firewall to exclude this port number.
40
