Which ports are needed to be opened on a firewall for Foglight for database agents? (4302154)

Which ports are needed to be opened on a firewall for Foglight for database agents?

Which ports are needed to be opened on the firewall to allow monitoring of Foglight for Databases (Oracle, SQL Server, DB2, Sybase)?

Below is the list of ports that need to be opened bidirectionally between the Foglight Management Server (FMS), Foglight Agent Manager (FglAM) and the monitored database hosts.  Note that port numbers may vary depending on your specific configuration.

Name	Port Number	Source	Target
SQL Server	1433 (default)*	Foglight Agent Manager	Remote Host Server
Oracle	1521 (default)*	Foglight Agent Manager	Remote Host Server
DB2 (LUW)	50000 (default)*, 139 (NetBIOS Session Service for DCOM Windows connections), 445 (Windows shares for DCOM Windows connections)	Foglight Agent Manager	Remote Host Server
Windows WMI (Remote Procedure Call) via DCOM	135	Foglight Agent Manager	Remote Host Server
Sybase	5000 (default)*	Foglight Agent Manager	Remote Host Server
Windows WMI	Range of ports (Microsoft default) or this can be configured to use either a static port or smaller range of ports.	Foglight Agent Manager	Remote Host Server
Windows (WinRM)	5985 (http), 5986 (https)	Foglight Agent Manager	Remote Host Server
FglAM Data Submission	8080 (http), 8443 (https)	Foglight Agent Manager	Foglight Management Server
SSH (Linux/Unix)	22	Foglight Agent Manager	Remote Host Server
Ad-Hoc Queries (RMI)	3235 (SQL Server), 3723 (Oracle), 3725 (DB2), 3260 (Azure SQL)	Foglight Management Server	FglAM
PI Data Submission	1433 (default)*	Foglight Agent Manager	SQL PI Repository (SQL Server)
Ad-Hoc PI Queries	1433 (default)*	Foglight Management Server	SQL PI Repository (SQL Server)

* Default ports may be different in end-user environments. The ports should match the connection port to the database.

The same list of ports can be found in the Deployment Guide.

Ideally, the connection between the Agent Managers and monitored hosts should be unidirectional, however Development has found that on-demand RMI collections (sessions and blocking history) and WMI OS connections may have issues when a port is not opened bidirectionally. The FMS and FglAM must be opened bidirectionally because the FglAM connects to the FMS, and the FMS initiates RMI calls to the FglAMs.