<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Configure SAS MidTier Firewall in Administration and Deployment</title>
    <link>https://communities.sas.com/t5/Administration-and-Deployment/Configure-SAS-MidTier-Firewall/m-p/299626#M6116</link>
    <description>&lt;P&gt;You would need to update iptables with the ports or port ranges for each jvm.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I believe the "alternatively" language/statement is saying that instead of updating iptables, you could configure your SAS applications to use ports already allowed on iptables (instead of the default ports).&lt;/P&gt;</description>
    <pubDate>Tue, 20 Sep 2016 18:21:51 GMT</pubDate>
    <dc:creator>Timmy2383</dc:creator>
    <dc:date>2016-09-20T18:21:51Z</dc:date>
    <item>
      <title>Configure SAS MidTier Firewall</title>
      <link>https://communities.sas.com/t5/Administration-and-Deployment/Configure-SAS-MidTier-Firewall/m-p/299625#M6115</link>
      <description>&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;I have the task of configuring the SAS Intelligence Platform on Redhat Linux 6.x across three servers and need to have the firewalls (iptables) configured on each server.&amp;nbsp; So far it seems like we are set for the Metadata &amp;amp; Compute servers and now we are configuring the MiddleTier server.&amp;nbsp; &lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;I have a question based on what is stated in the Middle Tier Administration Guide on page 45:&amp;nbsp; &lt;EM&gt;"To prevent these issues, you&lt;/EM&gt;&lt;/FONT&gt;&lt;/P&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&lt;EM&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;can modify the firewall configuration to permit traffic to Java applications. Alternatively, you can manually update the SAS configuration to ensure that ports in the appropriate range are available through the firewall."&lt;/FONT&gt;&lt;/EM&gt;&lt;/DIV&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;Then in the next paragraph the doc it discusses setting the JVM options to accomodate a firewall.&amp;nbsp; The question that I have is whether or not I will need to open the ports in the firewall based on the ports used for the JVM settings?&amp;nbsp; I think so, but confirmation would be great.&lt;/FONT&gt;&lt;/DIV&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;Maybe the "Alternatively" sentence above is meant to refer to opening the large port range:&lt;/FONT&gt;&lt;/FONT&gt;&lt;FONT face="arial,helvetica,sans-serif" size="2"&gt;1024-65535&lt;/FONT&gt;&lt;/DIV&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&amp;nbsp;&lt;/DIV&gt;
&lt;DIV style="left: 274.993px; top: 505.547px; font-size: 16.6667px; font-family: sans-serif; transform: scaleX(1);" data-canvas-width="467.81666666666683"&gt;&amp;nbsp;&lt;/DIV&gt;</description>
      <pubDate>Tue, 20 Sep 2016 18:17:02 GMT</pubDate>
      <guid>https://communities.sas.com/t5/Administration-and-Deployment/Configure-SAS-MidTier-Firewall/m-p/299625#M6115</guid>
      <dc:creator>SDV</dc:creator>
      <dc:date>2016-09-20T18:17:02Z</dc:date>
    </item>
    <item>
      <title>Re: Configure SAS MidTier Firewall</title>
      <link>https://communities.sas.com/t5/Administration-and-Deployment/Configure-SAS-MidTier-Firewall/m-p/299626#M6116</link>
      <description>&lt;P&gt;You would need to update iptables with the ports or port ranges for each jvm.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I believe the "alternatively" language/statement is saying that instead of updating iptables, you could configure your SAS applications to use ports already allowed on iptables (instead of the default ports).&lt;/P&gt;</description>
      <pubDate>Tue, 20 Sep 2016 18:21:51 GMT</pubDate>
      <guid>https://communities.sas.com/t5/Administration-and-Deployment/Configure-SAS-MidTier-Firewall/m-p/299626#M6116</guid>
      <dc:creator>Timmy2383</dc:creator>
      <dc:date>2016-09-20T18:21:51Z</dc:date>
    </item>
  </channel>
</rss>

