Understand firewall settings for PI AF Client and Data Archive

PI AF Clients need to connect to the PI AF Application Service to access the PI AF SQL Server database. They may also need to connect directly to Data Archive if PI AF elements have been configured with PI point data references. The connection to Data Archive is established directly from the PI AF Client. No direct connection or authentication is needed against the SQL Server or PI AF server.

By default, communication to Data Archive requires port 5450 to be open; however, you can change this. For detailed information, review the knowledge base article: Which firewall ports should be opened for the PI Server/ PI Data Archive?.