Security Compliance

Configure ARM applications to use custom RPC port range

This article provides steps to limit ARM main and configuration application to use only specific RPC port range.

First published date

6/28/2019 9:46 PM

Last published date

10/28/2020 2:37 PM

Overview

In case of some environments Network/Firewall restrictions can be in place which allow only a defined RPC dynamic port range to be utilized. Here you will steps to limit ARM Client and ADM Configuration to use only specific dynamic RPC port range.
 

Product section

Access Rights Manager

Cause

Network / Firewall restrictions for RPC dynamic port range

Resolution

If connection is not possible due to a restrictive firewall configuration, you can edit the configuration files as  shown below by assigning a fixed port or a specific port range to the ARM applications.

This applies to ARM main and configuration application and executable jobs within ARM.

1. Create or add to the existing following files where you installed the ARM main and configuration application:
app8man.config.xml (main application)
appConfig.config.xml (configuration application)
with the following content under %ProgramData%\protected-networks.com\8MAN\cfg: 
<?xml version="1.0" encoding="utf-8"?>
<config>
 <network>
   <portRange>
     <start type="System.Int32">0</start>
     <end type="System.Int32">0</end>
   </portRange>
 </network>
</config>
2. Replace the 0 with the desired RPC ports that are allowed in your network.
Note: You will have to restart the ARM application/ARM service where the changes have been made either on the client or server-side or both.