Securing Information platform services
Related Topics
•
Command lines overview
6.14.2 Communication between Information platform services components
Information platform services components, such as browser clients, rich clients, servers, and the SDK hosted in the web application server, communicate with each other across the network during typical workflows. You must understand these workflows to deploy SAP BusinessObjects products across different subnets that are separated by a firewall.
6.14.2.1 Requirements for communication between Information platform services components
Deployments of Information platform services must conform to these general requirements.
1.
Every server must be able to initiate communication with every other Information platform services server on that server's Request Port.
2.
The CMS uses two ports. Every Information platform services server, Information platform services rich client, and the web application server that hosts the Information platform services SDK must be able to initiate communication with the Central Management Server (CMS) on both of its ports.
3.
Every job server child process must be able to communicate with the CMS.
4.
Thick clients must be able to initiate communication with the Request Port of the Input and Output
File Repository Servers
5.
If auditing is enabled for thick clients and web applications they must be able to initiate communication with the Request Port of the Adaptive Processing Servers that hosts the Client Auditing Proxy
Service.
6.
In general, the web application server that hosts the Information platform services SDK must be able to communicate with the Request Port of every Information platform services server.
Note:
The web application server only needs to communicate with Information platform services servers that are used in the deployment.
7.
Job Servers use the port numbers that are specified with the -requestJSChildPorts <port
range>
command. If no range is specified in the command line, the servers use random port numbers. To allow a job server to communicate with a CMS, FTP, or mail server on another machine open all of the ports in the range specified by -requestJSChildPorts on your firewall.
8.
The CMS must be able to communicate with the CMS database listen port.
120 2012-11-26
Securing Information platform services
9.
The Connection Server, most Job Server child process, and every system database and auditing
Processing Server must be able to initiate communication with the reporting database listen port.
Related Topics
•
Information platform services port requirements
6.14.2.2 Information platform services port requirements
This section lists the communication ports used by Information platform services servers, thick clients, the web application server hosting the SDK, and third-party software applications. If you deploy
Information platform services with firewalls, you can use this information to open the minimum number of ports in those firewalls.
6.14.2.2.1 Port Requirements for Information platform services applications
This table lists the servers and port numbers used by Information platform services applications.
Product
Client Application
Associated Servers Server Port Requirements
Information platform services
Business
View Manager
CMS
Input FRS
CMS Name Server Port (6400 by default)
CMS Request Port
Input FRS Request Port
121 2012-11-26
Securing Information platform services
Product
Client Application
Associated Servers Server Port Requirements
Information platform services
Information platform services
Central Configuration
Manager
(CCM)
Report Conversion Tool
CMS
Server Intelligence Agent
(SIA)
CMS
Input FRS
The following ports must be open to allow CCM to manage remote Information platform services servers:
CMS Name Server Port (6400 by default)
CMS Request Port
The following ports must be open to allow CCM to manage remote SIA processes:
Microsoft Directory Services (TCP port
445)
NetBIOS Session Service (TCP port
139)
NetBIOS Datagram Service (UDP port
138)
NetBIOS Name Service (UDP port 137)
DNS (TCP/UDP port 53)
(Note that some ports listed above may not be required. Consult your Windows administrator).
Information platform services
)
Server Intelligence Agent
(SIA
Every Information platform services server including the
CMS
SIA Request Port (6410 by default)
CMS Name Server Port (6400 by default)
CMS Request Port
CMS Name Server Port (6400 by default)
CMS Request Port
Input FRS Request Port
122 2012-11-26
Securing Information platform services
Product
Client Application
Associated Servers Server Port Requirements
Information platform services
Repository
Diagnostic
Tool
CMS
Input FRS
Output FRS
CMS Name Server Port (6400 by default)
CMS Request Port
Input FRS Request Port
Output FRS Request Port
Information platform services
Information platform services SDK hosted in the web application server
All Information platform services servers required by the deployed products.
CMS Name Server Port (6400 by default)
CMS Request Port
Request Port for each server that is required.
Information platform services
Web Services provider
(dswsbob je.war
)
All Information platform services servers required by the products accessing the web services.
CMS Name Server Port (6400 by default)
CMS Request Port
Request Port for each server that is required.
6.14.2.2.2 Port Requirements for Third-Party Applications
This table lists third-party software used by SAP Business Objects products. It includes specific examples from some software vendors, but different vendors will have different port requirements.
Third-party application
SAP Business Objects component that uses the thirdparty product
Third-party application port requirement
Description
CMS System
Database
Central Management
Server (CMS)
Database server listen port
The CMS is the only server that communicates with the
CMS system database.
123 2012-11-26
Securing Information platform services
Third-party application
SAP Business Objects component that uses the thirdparty product
Third-party application port requirement
Description
CMS Auditing
Database
Central Management
Server (CMS)
Database server listen port
The CMS is the only server that communicates with the
CMS auditing database.
web application server
All Information platform services web services and web applications including the CMC
HTTP port and HTTPS port.
For example, on Tomcat the default HTTP port is
8080 and the default
HTTPS port is 443.
The HTTPS port is only required if secure HTTP communication is used.
FTP server Every Job Server
FTP In (port 21)
FTP Out (port 22)
The Job Servers use the FTP ports to allow send to FTP.
Email server Every Job Server SMTP (port 25)
The Job Servers use the
SMTP port to allow send to
email .
Unix servers to which the Job
Servers can send content
Every Job Server rexec out (port 512)
(Unix only) rsh out (port
514)
(Unix only) The Job Servers use these ports to allow send
to disk .
Authentication
Server
CMS web application server that hosts the Information platform services SDK
Every thick client.
Connection port for thirdparty authentication.
For example, the connection server for the Oracle
LDAP server is defined by the user in the file ldap.ora.
User credentials are stored in the third-party authentication server. The CMS, Information platform services SDK, and the thick clients listed here need to communicate with the third-party authentication server when a user logs on.
124 2012-11-26
