Return
-
Title
Which ports are needed to be opened on a firewall for Foglight for database agents? -
Description
Which ports are needed to be opened on the firewall to allow monitoring of Foglight for Databases (Oracle, SQL Server, DB2, Sybase)?
-
Resolution
Below is the list of ports that need to be opened bidirectionally between the Foglight Management Server (FMS), Foglight Agent Manager (FglAM) and the monitored database hosts. Note that port numbers may vary depending on your specific configuration.
Name Port Number Source Target SQL Server 1433 (default)* Foglight Agent Manager Remote Host Server Oracle 1521 (default)* Foglight Agent Manager Remote Host Server DB2 (LUW) 50000 (default)*,
139 (NetBIOS Session Service for DCOM Windows connections),
445 (Windows shares for DCOM Windows connections)Foglight Agent Manager Remote Host Server Windows WMI (Remote Procedure Call) via DCOM 135 Foglight Agent Manager Remote Host Server Sybase 5000 (default)* Foglight Agent Manager Remote Host Server Windows WMI Range of ports (Microsoft default) or this can be configured to use either a static port or smaller range of ports. Foglight Agent Manager Remote Host Server Windows (WinRM) 5985 (http),
5986 (https)Foglight Agent Manager Remote Host Server FglAM Data Submission 8080 (http),
8443 (https)Foglight Agent Manager Foglight Management Server SSH (Linux/Unix) 22 Foglight Agent Manager Remote Host Server Ad-Hoc Queries (RMI) 3235 (SQL Server),
3723 (Oracle),
3725 (DB2),
3260 (Azure SQL)Foglight Management Server FglAM PI Data Submission 1433 (default)* Foglight Agent Manager SQL PI Repository (SQL Server) Ad-Hoc PI Queries 1433 (default)* Foglight Management Server SQL PI Repository (SQL Server) * Default ports may be different in end-user environments. The ports should match the connection port to the database.
The same list of ports can be found in the Deployment Guide.
-
Additional Information
Ideally, the connection between the Agent Managers and monitored hosts should be unidirectional, however Development has found that on-demand RMI collections (sessions and blocking history) and WMI OS connections may have issues when a port is not opened bidirectionally. The FMS and FglAM must be opened bidirectionally because the FglAM connects to the FMS, and the FMS initiates RMI calls to the FglAMs.