DataCore Server Settings Disclosure

To allow SANsymphony to function properly, certain Windows operating system and firewall settings are altered during installation and upgrades. Security settings are changed but never disabled.

Firewall rules are added to allow the DataCore Executive Service to communicate with all other DataCore Servers on the network and to allow any iSCSI connections to take place.

All firewall rules can be viewed in Server Manager>Local Server>Windows Firewall.

Services and User Accounts Used by SANsymphony

DcsAdmin User Account

A local administrator account called DcsAdmin is created and assigned as the user for the following DataCore-specific services:

Do not delete the DcsAdmin account. For more on this account, see Changing DcsAdmin Password for Service Accounts.

Service State
DataCore Executive Running and set to "Automatic" on install
DataCore Intelligence Service Running and set to "Automatic (Delayed Start)" on install
DataCore Performance Monitor Agent Stopped and set to "Disabled" on install
DataCore SNMP Agent Stopped and set to "Disabled" on install

Default Local System User Account

A further service is installed but assigned the default "Local System" user account instead:

Service State
DataCore Update Service Running and set to "Automatic" on install

Network Ports Used by SANsymphony

Internal firewall exceptions are added for the following ports:

Port Use
80 Used when uploading support bundles automatically via the SANsymphony management console and port 3793 is unavailable. A manually configured outbound firewall rule may be required.
161 and 162 Required when the DataCore SNMP Agent is being used. A manually configured firewall rule may be required.
443

Used by the DataCore Intelligence Service and the DataCore Update Service to communicate with the remote DataCore Insight Services portal.

For more on information, see Enabling and Disabling Data Collection in the DataCore Intelligence Service Help.

A manually configured outbound firewall rule may be required for these two services

3260 Used for all iSCSI connections to and from the DataCore Server.
3793

Used by the DataCore Executive Service to communicate with all DataCore Servers in the same server group and to/from remote server groups configured for asynchronous IP mirroring.

DataCore Server hostnames will be resolved by Windows and/or local DNS settings.

See Name Resolution for more information.

Remote URLs Used by SANsymphony

Use Port

DataCore Support Bundle repository – for automatic uploading to supportbundles.datacore.com

3793

License Activation Server – for automatic activations on licensing.datacore.com

80 or 3793

DataCore Intelligence and Update Services

For details, including required URLs, see DataCore FAQ #1765.

443

Power Options

Control Panel > Hardware > Power Options is set to "High performance".

Windows MPIO on a DataCore Server

This applies to iSCSI connections only:

  • Backend Connections (Initiator) have a load balance policy of "Failover Only"
  • Mirror Paths (Initiator and Target) have a load balance policy of "Round Robin"

See also DataCore FAQ #1456.

DataCore REST Support

Refer to the DataCore REST Support.