How to open TCP/IP ports in RSA Identity Governance & Lifecycle
Originally Published: 2014-10-22
Last Modified: 2023-10-06
Article Number
000066258
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: All
 
Issue
This RSA Knowledge Base Article describes how to open TCP/IP ports blocked by a firewall that are not opened by default in RSA Identity Governance & Lifecycle.

NOTE: Opening additional ports may represent a security threat.

Resolution
The methods differ depending on the Operating System:

RedHat

Modify iptables:
  1. Login to the server as the root user.
  2. Edit  /etc/sysconfig/iptables
  3. Add the following line:
iptables -I RH-Firewall-1-INPUT -j ACCEPT -p tcp --destination-port ***** -i eth0
Replace "*****" with the port number you want opened, that port will be opened (available) for access.
  1. Save and exit /etc/sysconfig/iptables
  2. Restart the firewall with the command:
service iptables restart

SuSe

Add the relevant ports in the Advanced mode of the Firewall Allowed Services Yast module or edit SuSEfirewall2.

Yast

  1. Login to the server as the root user.
  2. Start Yast:
Yast > Security & Users > Firewall > Allowed Services > Advanced

Add your ports as space delimited/separated lists in the appropriate row (TCP, UDP and so on). Ranges are designated by a colon; e.g. ten VNC ports from 5905 to 5914 would be 5905:5914. You may use service names instead of numerical ports; e.g. http and 80 are the same.
  1. Exit Yast. The firewall will be automatically restarted.

SuSEfirewall2

  1. Login to the server as the root user
  2. Edit /etc/sysconfig/SuSEfirewall2
  3. Append the port number(s) to the following string. For example, to open ports 21 22 and 1158:
FW_SERVICES_EXT_TCP="21 22 1158"
  1. Save and exit /etc/sysconfig/SuSEfirewall2
  2. Restart the firewall with the following commands:
For SuSE 11 SP3:
/etc/init.d/SuSEfirewall2_init restart
/etc/init.d/SuSEfirewall2_setup restart
 
For SuSE 12 SP2:
systemctl restart SuSEfirewall2 SuSEfirewall2_init

 

Related Articles

Trending Articles

Don't see what you're looking for?