Unsolved
1 Rookie
•
8 Posts
0
253
SCG deployment
I have existing eSRS GW but planned to deploy SCG instead of upgrade. I just deploy the SCG Policy Manager and will get all the new port opened. My plan is to shutdown eSRS GW and deploy SCG GW with same IP as SCG GW. So, I don't need to go thru to pain to open ports again. Only question is the port requirement. I only use it to monitor Isilon, DD, VMAX and PowerMAX and have no plan to monitor any other devices. From the upgrade from eSRS to SCG guide, only new ports required are 8443/443 from GW to esrs3-core.emc.com and esrs3-coredr.emc.om as well as 5700 for the web client. However, from the SCG deployment guide, I see a lot of new requirements. Are they really required in my case? I don't use it to monitor Dell servers etc. They are handled by server team.
DELL-Joey C
Moderator
Moderator
•
3.1K Posts
0
October 12th, 2023 04:19
Hi,
I did not come across specifically SCG only monitor other exclude servers, as I usually encounter issues with SCG's communication and requested users to check firewall settings with the required. I understood you will deploy SCG fresh, upon checking the upgrade guide it only show 8443/443 and 5700: https://dell.to/46pOAvC.
I'd probably would suggest trying to deploy only with those ports open and monitor the communication. If there are issues, you probably need to look into the SCG port requirements.
ayeung
1 Rookie
1 Rookie
•
8 Posts
0
November 3rd, 2023 17:36
Double check with firewall team. Port 8443/443 from GW to esrs3-core.emc.com and esrs3-coredr.emc.om are already allowed. So, only rule added is port 5700 for client access.
Shutdown both eSRS GW yesterday and completed deploying a SCG GW on one of the site with same IP as the old eSRS GW. Dial in are working fine for VMAX, PMAX and Isilon. All of them are added thru SCG GW. Also, DD are added thru SCG GW. Again, those are the only products I want to monitor under SCG. Nothing else.