Platform Deployment Guide › Known Issues (Deployment) › General Deployment › Firewall Configuration on Endpoints

Firewall Configuration on Endpoints

The CA DataMinder installation wizard automatically registers the CA DataMinder infrastructure as a firewall exception. This enables data, including policy updates, to replicate unhindered through the firewall between CA DataMinder endpoints and servers.

However, this automatic configuration requires the firewall to allow the CA DataMinder exceptions:

• On Windows XP endpoints and Windows 2003 servers hosting CA DataMinder, you must turn off the ‘Don’t allow exceptions’ setting. Find this setting on the General tab of the Windows Firewall applet.
• On Windows Vista and 7 endpoints and Windows 2008 servers hosting CA DataMinder, you must turn off the 'Block all incoming connections' setting. Find this setting in the Domain Networks section of the Windows Firewall applet.

Important! If either of these settings is on, the Windows Firewall allows no firewall exceptions, including the CA DataMinder infrastructure. This means that the endpoint computer cannot contact its parent server. As a consequence, the endpoint is unable to receive any user or machine policies. This effectively paralyzes any CA DataMinder agents on the endpoint computer so they are unable to monitor, capture or control user activity.