CUBE connection to DMA uses Remoting by default (using HTTPS 443 and 8004). But some customers corporate network doesn’t permit connections on 8004. They only allow HTTPS on 443.
I suggested to use gRPC mode to use only HTTPS (443). But this setting cannot be changed until CUBE makes a connection to DMA first using 80/8004 to change the Connection settings to gRPC.
Do we have a solution to make CUBE connection stricly and ONLY using HTTPS (on 443) even the first time and not use any other ports?
The connection setting in Cube must be set to “Auto”. The ConnectionSettings.txt file on the agent(s) must contain GRPCConnection (see link from Seppe).
Cube will attempt to retrieve ConnectionSettings.txt in parallel over HTTP/80 and HTTPS/443. The first request that responds will get processed. So it is not possible to prevent Cube from making an outgoing TCP connection to port 80, but it does not matter if this attempt is blocked or times out, as long as port 443 is responding. A valid HTTPS certificate is required (trusted by the client and matching with the hostname).
Hi Rajesh,
I believe this is possible by changing the connectionsettings.txt file on the DMA. Cube will retrieve this information to determine how it should connect to the DMA.
You can find there necessary information on the connectionsettings.txt here.
After this step connectionsettings.txt defines “* type=GRPCConnection
Do we need to restart the DMA?
Hi,
It is not necessary to restart the Agent after changing this file according to the docs, but I believe it is best to restart IIS.
https://docs.dataminer.services/user-guide/Reference/Skyline_DataMiner_Folder/More_information_on_certain_files_and_folders/ConnectionSettings_txt.html
Indeed, if the connectionsettings.txt defines “* type=GRPCConnection”, Cube should immediately connect with GRPC and only use port 443. Port 80 can be closed.