DataCore Server Settings Disclosure

To allow DataCore SANsymphony to function properly, certain Windows operating system and firewall settings are altered during installation and upgrades. Security settings are changed but never disabled.

Firewall rules are added to allow the DataCore Executive Service to communicate with all other DataCore Servers on the network and to allow any iSCSI connections to take place.

All firewall rules can be viewed in Server Manager>Local Server>Windows Firewall.

Services and User Accounts Used by DataCore SANsymphony

DcsAdmin User Account

A local administrator account called DcsAdmin is created and assigned as the user for the following DataCore-specific services:

Do not delete the DcsAdmin account. For more on this account, see Changing DcsAdmin Password for Service Accounts.

Service	State
DataCore Executive	Running and set to "Automatic" on install
DataCore Intelligence Service	Running and set to "Automatic (Delayed Start)" on install
DataCore Performance Monitor Agent	Stopped and set to "Disabled" on install
DataCore SNMP Agent	Stopped and set to "Disabled" on install

Default Local System User Account

A further service is installed but assigned the default "Local System" user account instead:

Service	State
DataCore Update Service	Running and set to "Automatic" on install

Network Ports Used by DataCore SANsymphony

Internal firewall exceptions are added for the following ports:

Port	Use
80	Used when uploading support bundles automatically via the DataCore Management Console and port 3793 is unavailable. A manually configured outbound firewall rule may be required.
161 and 162	Required when the DataCore SNMP Agent is being used. A manually configured firewall rule may be required.
443	Used by the DataCore Intelligence Service and the DataCore Update Service to communicate with the remote DataCore Insight Services portal. For more on information, see Enabling or Disabling Data Collection in the DataCore Intelligence Service Help. A manually configured outbound firewall rule may be required for these two services
3260	Used for all iSCSI connections to and from the DataCore Server.
3793	Used by the DataCore Executive Service to communicate with all DataCore Servers in the same server group and to/from remote server groups configured for asynchronous IP mirroring. DataCore Server hostnames will be resolved by Windows and/or local DNS settings. See Name Resolution for more information.

Remote URLs Used by DataCore SANsymphony

Use	Port
DataCore Support Bundle repository – for automatic uploading to https://supportbundles.datacore.com/	3793
License Activation Server – for automatic activations on https://licensing.datacore.com/	80 or 3793
DataCore Intelligence and Update Services For details, including required URLs, see DataCore FAQ #1765.	443

Use

Port

DataCore Support Bundle repository – for automatic uploading to https://supportbundles.datacore.com/

3793

License Activation Server – for automatic activations on https://licensing.datacore.com/

80 or 3793

DataCore Intelligence and Update Services

For details, including required URLs, see DataCore FAQ #1765.

443

Power Options

Control Panel > Hardware > Power Options is set to "High performance".

Windows MPIO on a DataCore Server

This applies to iSCSI connections only:

Backend Connections (Initiator) have a load balance policy of "Failover Only"
Mirror Paths (Initiator and Target) have a load balance policy of "Round Robin"

DataCore REST Support

Refer to the DataCore REST API Reference Guide.