Implementation Guide › Installing the Enterprise Management Server › Environment Architecture

Environment Architecture

An enterprise installation of CA Access Control lets you centrally manage policies, privileged accounts, and CA Access Control endpoints; view information about the policies on each endpoint; and report on the security status of endpoints. You can manage these features through web-based interfaces or through utilities.

To manage your enterprise installation of CA Access Control, install the Enterprise Management Server on a central computer and configure it for your enterprise.

CA Access Control is installed silently when you install the Enterprise Management Server. CA Access Control protects the Enterprise Management Server and provides core functionality that supports the applications in the Enterprise Management Server.

Once you installed the Enterprise Management Server, you install and configure the CA Access Control and UNAB endpoints. If you have existing CA Access Control endpoints, configure each endpoint for advanced policy management and reporting.

The following diagram shows the Enterprise Management Server architecture:

The previous diagram illustrates the following:

• The Enterprise Management Server uses the following ports:
  • Port 8891 for symmetric encryption and port 5249 for SSL communication with the CA Access Control endpoints.
  • Ports 1433 (MS SQL) or 1521 (Oracle) to communicate with the RDBMS.
  • Ports 389 or 686 for encrypted communication with Active Directory.
  • Port 20411 for encrypted communication with the Java Connector Server (JCS)
  • Port 7243 for encrypted communication with the Message Queue
• PUPM communicates with the endpoints according to the endpoint type (Windows Agentless, SSH Device and more).
• Enterprise Management Server communciates with CA Business Intelligence using port 8080.
• Enterprise Management Server communicates with CA User Activity Reporting Module using port 5250 for encrypted communication.
• UNAB communicates with Active Directory using the following ports: 53, 88, 123, 289, 445, 464, 3268.