Change Auditor - For Advanced Users 7.3

Table 5. Quest.ChangeAuditor.Coordinator SCP
Attribute	Attribute Syntax	Function	Default Value
CN	String	SCP Name	CN=ChangeAuditor.Coordinator
keywords	Multi-Value	Storage for the product GUID to facilitate location of only Change Auditor SCPs	F0E51C1A-4424-4387-B7DA-3A245CCEF0 ChangeAuditor.Coordinator
serviceBindinginformation	Multi-Value	Contains Client Port, Public SDK Port, Agent WCF Port, coordinator Version and the InstallationName	<XML>
serviceClassName	String	Used to store the service class for authentication	NPRepository4
serviceDNSName	String	FQDN of the computer running the coordinator service	<Server FQDN>
serviceDNSNameType	String	The DNS record type of the host listed in the serviceDNSName	A

Ports and protocols

Change Auditor uses the following incoming communications ports (listening ports) to establish communication:

Table 6. Change Auditor incoming communication ports

Change Auditor client

None

Change Auditor agents

None

Change Auditor coordinators

The coordinator uses the following listening ports that can be dynamically or statically assigned.

•

Client Port

•

Public SDK Port

•

Agent WCF Port

NOTE: By default, the incoming ports are dynamically assigned by Windows. However, you can use the Coordinator Configuration Tool to specify static ports for each of these listening ports. To access the Coordinator Configuration Tool, right-click the coordinator system tray icon and select Coordinator Configuration.

The following table describes each segment of communication that occurs in the Change Auditor system along with technical details of each type of communication.

Table 7. Change Auditor communication segments
From/To	Description	Originating Port	Protocol	Destination Port
Client to Coordinator Service	WCF (Windows Communication Foundation)	Dynamic	TCP	Dynamic
Client to Agents (server and workstation agents)	WCF (Windows Communication Foundation) for configuration refresh If WCF configuration refresh call fails, falls back to WMI (DCOM) and port 135.	Dynamic	TCP	Dynamic
Client to Agents (server and workstation agents)	SCM (ServiceControlManager) for Agent Service Start\Stop	Dynamic	TCP	135
Coordinator to Server Agents	WCF for Azure/Office 365 configuration information			8373
Client to SQL Server Database	Connection for archive databases only	Dynamic	TCP	1433
Agent to Coordinator Service	WCF (Windows Communication Foundation)	Dynamic	TCP	Dynamic
Agent to SharePoint SQL Server database	OLEDB SQL Client	Dynamic	TCP	1433
SDK User\Service to Coordinator Service	WCF (Windows Communication Foundation)	Dynamic	TCP	Dynamic
Coordinator to SQL Server Database	.NET SQL	Dynamic	TCP	1433
Coordinator to Azure SQL Managed Instance Database (Private endpoint)	.NET SQL	Dynamic	TCP	1433
Coordinator to Azure SQL Managed Instance Database (Public endpoint)	.NET SQL	Dynamic	TCP	3342
Coordinator to Agents (server and workstation agents)	SMB File Share for Agent Deployment	Dynamic	TCP	445
Coordinator to Agents (server and workstation agents)	Remote Registry for Agent Deployment (RPC)	Dynamic	TCP	135
*Coordinator to Active Directory LDAP	.NET Directory Services	Dynamic	TCP	389
*Coordinator to Active Directory	Kerberos authenticated connections	Dynamic	TCP	88
*Coordinator to Active Directory GC (Global Catalog)	.NET Directory Services	Dynamic	TCP	3268
Coordinator to DNS Server	DNS name resolution for .NET Directory Services	Dynamic	TCP	53
Web Client to Coordinator	WCF (Windows Communication Foundation)	Dynamic	TCP	Dynamic
Internet Browser (for example, Chrome™ and Internet Explorer) to web client	HTTP/HTTPS	Dynamic	TCP	80/443