4.2 Protecting Privileged Access Manager through Firewall

You can protect the Privileged Access Manager with firewalls. The following is an illustration of a firewall setup for a basic Privileged Access Manager configuration.

Figure 4-1 Privileged Access Manager Components between Firewalls

The following ports are used by Privileged Access Manager Agent and Manager:

 

Platform

Network Ports

Purpose of the Port

Manager

Linux

443

For administration and user Web console access over HTTPS protocol.

2222

SSH proxy for privileged access.

13389

RDP proxy for privileged access.

29120

For agent and manager TLS communication.

Database Access Through Privileged Access Manager Proxy.

For database monitoring functionality

Privileged Access Manager Windows

443

For administrator and user Web console access over HTTPS protocol.

13389

RDP proxy for privileged access.

29120

For agent and manager TLS communication.

Agent

Linux, Unix, and Windows

29120

For agent and manager TLS communication.

For more information about firewall, see section When to use firewalld, nftables, or iptables in RHEL Documentation and section Firewalling Basics in SLES Documentation.