Windows Settings Disclosure

In order to allow the software to function properly and DataCore Servers to communicate, certain Windows operating system settings are automatically changed during the software installation. The installation only makes the minimum Windows security changes required. Although security settings are changed, they are never disabled.

Below are the specific changes performed to the Windows settings during the installation:

o           Operating system firewall rules are added to allow DataCore Executive Service, DataCore Support Service, DataCore Management Console, and DataCore iSCSI communications. (Specific firewall rules can be viewed in Server Manager>Windows Firewall.)

o           A local administrator account DataCore Executive Service with logon as service privileges (user name DcsAdmin) is created exclusively for services in SANsymphony software. Do not delete the account.

o           Power plan in Windows Power Options (see Control Panel) is configured for high performance.

o           The default global MPIO load balance policy is set to Failover Only for all paths except mirror paths and DataCore Disks which are set to Round Robin.

o           Configure TCP Congestion Provider for iSCSI to remove potential five second delay in iSCSI traffic by creating a new net transport filter.

TCP and UDP Ports

In order for the software to function properly, some ports must be open:

o           Port 3793 is used by the DataCore Executive Service (Dcsx.exe) to communicate and transfer data between DataCore Servers (locally and in Remote Replications), and to communicate between Management Consoles and DataCore Servers.
  Ensure these machines can accommodate traffic between them based on your network configuration and taking into consideration any firewalls.

o           Port 3793 is used for automatic license activation. If port 3793 is unavailable, port 80 can be used for automatic license activation.
 An outbound firewall rule may be required.

o           Port 3793 is used to upload support bundles to DataCore Customer Support.
 An outbound firewall rule may be required.

o           Port 3260 is used for iSCSI communications. Ensure machines using iSCSI can accommodate traffic between them based on your network configuration.

o           The Windows operating system is used to resolve hostnames. Hostnames must be resolved on any DataCore Server or computer running the DataCore Management Console that uses hostnames (not FQDN) to connect to the server group. (See Name Resolution for more information.) This can be accomplished in different ways; use the optimal method according to your environment.

·            Add names and addresses to the Windows operating system HOSTS file. (Generally, use the short name if not in a domain and the FQDN if in a domain.)

·            DNS can be used if the servers are in a domain.  

·            Port 137 (Windows NetBIOS port) can be opened in any necessary firewalls.

o           Ports 161 and 162 are used for SNMP support. Ports will be handled by Windows operating system as part of the Windows SNMP package.

o           Port 443 is used for the DataCore Intelligence Service.

o           Port 3795 is used by the Support Bundle Relay (if configured) to receive support bundles. See Support Bundles for more information.

o           For ports used with DataCore REST Support, refer to the Getting Started Notes in the DataCore REST Support WebHelp.