Install the Domain Orchestrator › Post-Installation Tasks for the Domain Orchestrator › Configure Firewalls for Bi-directional Communication

Configure Firewalls for Bi-directional Communication

CA Process Automation components can be accessed through Web clients. See Ports Used by CA Process Automation for details on the ports used by each component in a CA Process Automation system.

You must configure firewalls to allow bi-directional communication. Bi-directional communication is needed between the following component pairs:

• The Domain Orchestrator and the database server with the database that hosts the Library data store.
• The Domain Orchestrator and the database server with the database that hosts the reporting data store.
• The Domain Orchestrator and the database server with the database that hosts the Runtime data store.
• The Domain Orchestrator and CA EEM.
• Each Orchestrator and the database server with the database that hosts the Library data store.
• Each Orchestrator and the database server with the database that hosts the reporting data store.
• Each Orchestrator and the database server with the database that hosts the Runtime data store.

If you use local firewalls on Orchestrator or agent hosts, make sure that CA Process Automation executables can listen and connect bi-directionally through the firewall on each host. Some host-based firewall programs (such as Windows Firewall) allow exceptions for executables.