Discover Agents on DMZ

[Pavel Caminschi]

Hi Guys,

I have a customer with CA CCA 12.8 CP3 environment.
They want to discover agents on multiple DMZ environments(25 different DMZs).
I suggested to have on each DMZ by one NDG Server so we can do the discovery but this approach is not accepted.
Also customer doesn't want to open the entire range of Ports used for Agent Discovery.
Do you have any alternative solution for this scenario? What will be the best approach in handling agents on different DMZ segments?

Regards,
Pavel.

[Kevin Yeh]

Hi Pavel,

If the customer is willing to install the an NDG into each DMZ, then the required ports for communicating with the NDG can be used.
Otherwise WMI can be configured to use a static port instead of dynamic ports.

https://docs.microsoft.com/en-us/windows/win32/wmisdk/setting-up-a-fixed-port-for-wmi

Regards,

Kevin

[Pavel Caminschi]

Hi Kevin,

Thanks for your reply. How can we handle UNIX agents? 
Can we have the same through Static Ports?

Regards,
Pavel.