What ports do I need to open on a Firewall, when monitoring WebSphere 3.5-4.0 with Performance Explorer?
Corba and IIOP are used underneath for monitoring WebSphere servers which means that on each startup, the server dynamically assigns the ports for the remote objects that will be accessed by the WebSphere PMI ( Performance Monitoring Interface), and hence Performance Explorer. That is, all except the pre-defined port 900 that is used for bootstrapping. Consequently, aside from port 900, it is impossible to determine the other ports that should be allowed by the firewall. This will be true when using just the PMI without Performance Explorer.
Therefore, the only options are:-
- To monitor from behind the firewall
- To monitor using the Performance Servlet. This is only available on WebSphere 4.0 and above. This technique only uses one port - by default 80 - and the communication is based on HTTP.
For more details on the Performance Servlet setup, please see:-How do I configure IBM WebSphere Application Server 4.x "Performance Servlet" in order to monitor using Performance Explorer?