Configuring Process Platform in DMZ

This topic describes the procedure to configure Process Platform in DMZ.

Process Platform services open some anonymous sockets internally for transmission of SOAP messages. These sockets are opened on any freely available port. But in case of a DMZ machine, only specified ports are made available by the administrator. So, when Process Platform is installed in DMZ, there may be problems in transmission of SOAP messages, as the freely available ports may be restricted by the administrator.

The administrator can specify a range of ports that these anonymous sockets can use, in the Cordys Properties file. Process Platform services then pick up the ports from this range, and use them for transmission of SOAP messages.

The following describes the procedure to configure Primary & Distributed Process Platform installation in DMZ:

1. Configure the Primary Process Platform installation in DMZ
   
   1. Stop the Cordys Monitor service.
   2. Add properties in Cordys Properties file
      Add the following properties to Cordys Properties file (wcp.properties):

      bus.anonymous.ports.minValue = <minvalue> bus.anonymous.ports.maxValue = <maxvalue> 

   3. Start the Cordys Monitor service.
2. Set a distributed installation of Process Platform through LAN, from a primary installation that is in DMZ.
   1. Copy the DMZ.xml file.
      Copy the DMZ.xml file of the primary installation, which is available in the <Process_Platform_Installation_Directory>/config, to the <Process_Platform_Installation_Directory>/config folder of the distributed installation.
   2. Add a Process Platform property.
      Open Cordys Management Console (CMC), click Cordys Properties, and add the following property:

      bus.ldap.information.file=true 

   3. Restart Cordys Monitor for the distributed edition.