DataCore Server Settings Disclosure
To allow SANsymphony to function properly, certain Windows operating system and firewall settings are altered during installation and upgrades. Security settings are changed but never disabled.
Firewall rules are added to allow the DataCore Executive Service to communicate with all other DataCore Servers on the network and to allow any iSCSI connections to take place.
All firewall rules can be viewed in Server Manager>Local Server>Windows Firewall.
Services and User Accounts Used by SANsymphony
DcsAdmin User Account
A local administrator account called DcsAdmin is created and assigned as the user for the following DataCore-specific services:
Do not delete the DcsAdmin account. For more on this account, see Changing DcsAdmin Password for Service Accounts.
| Service | State |
|---|---|
| DataCore Executive | Running and set to "Automatic" on install |
| DataCore Intelligence Service | Running and set to "Automatic (Delayed Start)" on install |
| DataCore Performance Monitor Agent | Stopped and set to "Disabled" on install |
| DataCore SNMP Agent | Stopped and set to "Disabled" on install |
Default Local System User Account
A further service is installed but assigned the default "Local System" user account instead:
| Service | State |
|---|---|
| DataCore Update Service | Running and set to "Automatic" on install |
Network Ports Used by SANsymphony
Internal firewall exceptions are added for the following ports:
| Port | Use |
|---|---|
| 80 | Used when uploading support bundles automatically via the SANsymphony management console and port 3793 is unavailable. A manually configured outbound firewall rule may be required. |
| 161 and 162 | Required when the DataCore SNMP Agent is being used. A manually configured firewall rule may be required. |
| 443 |
Used by the DataCore Intelligence Service and the DataCore Update Service to communicate with the remote DataCore Insight Services portal. For more on information, see Enabling and Disabling Data Collection in the DataCore Intelligence Service Help. A manually configured outbound firewall rule may be required for these two services |
| 3260 | Used for all iSCSI connections to and from the DataCore Server. |
| 3793 |
Used by the DataCore Executive Service to communicate with all DataCore Servers in the same server group and to/from remote server groups configured for asynchronous IP mirroring. DataCore Server hostnames will be resolved by Windows and/or local DNS settings. See Name Resolution for more information. |
Remote URLs Used by SANsymphony
| Use | Port |
|---|---|
|
DataCore Support Bundle repository – for automatic uploading to supportbundles.datacore.com |
3793 |
|
License Activation Server – for automatic activations on licensing.datacore.com |
80 or 3793 |
|
DataCore Intelligence and Update Services For details, including required URLs, see DataCore FAQ #1765. |
443 |
Power Options
Control Panel > Hardware > Power Options is set to "High performance".
Windows MPIO on a DataCore Server
This applies to iSCSI connections only:
- Backend Connections (Initiator) have a load balance policy of "Failover Only"
- Mirror Paths (Initiator and Target) have a load balance policy of "Round Robin"
See also DataCore FAQ #1456.
DataCore REST Support
Refer to the DataCore REST Support.