In this compact deployment, the DualShield All-in-One Server that includes both the SSO Server and Authentication Server resides in the corporate network.
In this extended deployment, the DualShield platform is split into two servers, the frontend SSO Server that reside in DMZ, and the backend Authentication Server that resides in the corporate network.
Port | Protocol | Function | Comment |
|---|---|---|---|
| 8074 | TCP | Communication between DualShield IIS Agent and DualShield SSO Server | Secure SSL |
| 8071 | TCP | Communication between DualShield SSO Server anf DualShield Authentication Server | Secure SSL |
| 389 | LDAP | Communication between DualShield Authentication Server and AD Server | |
| 636 | LDAPS | Communication between DualShield Authentication Server and AD Server | Secure SSL |