Firewall configuration

You must properly configure firewalls to support the connector.

AVEVA PI System Connector 3 (PSC3) to PI Connector Broker security

Communication between a connector and PI System Connector Broker occurs using Advanced Message Queuing Protocol (AMQP) over TCP on port 5671. This port is not configurable. The channel is secured by self-signed certificates that are created during installation. The same certificates are also used for authentication. If any firewalls are in the network route from the connector to the broker, all firewalls must be configured to permit the connector to open connection to TCP port 5671 on the broker host.

Note: The firewalls can be physical network devices or the Windows firewall on broker or connector hosts.

When configuring data flow from connector to broker, PI Data Collection Manager initiates a security handshake between the connector and the broker. During the security handshake, the connector and broker exchange certificates for authenticating and encrypting that allow data communication. PI Data Collection Manager exchanges a certificate between the connector and the broker, and then the broker returns the certificate. Secure data communication between the connector and broker occurs using AMQP over port 5671.