Configure ports for the InTouch Access Anywhere Secure Gateway

The InTouch Access Anywhere Secure Gateway uses several ports for communication. The following ports are used and must be configured on the computer hosting the Secure Gateway if a conflict exists:

• Port 443 (default): This is a dedicated port between the Secure Gateway Server and the external network. Check for port conflicts, and change port numbers if necessary. This is a common port that is also used by:

  • Microsoft Internet Information Services (IIS).

  • Remote Desktop, if Remote Desktop itself is enabled.

  • System Management Server, if a System Platform product (such as Application Server, InTouch HMI, or Historian) is installed on the same computer as the Secure Gateway Server.

• Port 8080: A port between the Secure Gateway Server and the InTouch Access Anywhere Server. The default port number is 8080, and can be changed.

• Port 80: The Secure Gateway includes an HTTP proxy that listens on port 80 by default. The port can be disabled after installing the Secure Gateway.

Resolving Secure Gateway port conflicts

The ports used by System Platform products and components are listed in Ports used by System Platform products. Refer to that list when modifying default port settings to ensure that you are not creating a new conflict.

The System Management Server is a required component for running System Platform products. By default, it uses port 443, the same as the Secure Gateway default. Therefore, a conflict results if you are installing any other System Platform component products on the same node as the Secure Gateway. You must change the port number for either the System Management Server or the Secure Gateway. If you change the System Management Server port, you must also change the port number for the System Monitor. In addition, other System Platform nodes must be configured to use the same System Management Server port.

Port assignments for both the System Management Server and the System Monitor can be changed during System Platform configuration, immediately following installation. See Work with Configurator and Configure AVEVA System Monitor for more information about changing the port numbers for these components.

To change the port number for the InTouch Access Anywhere Secure Gateway:

1. Locate the Secure Gateway configuration file, EricomSecureGateway.Config and open it for editing. The default file location is:
   C:\Program Files (x86)\Wonderware\InTouch Access Anywhere Secure Gateway\InTouch Access Anywhere Secure Gateway

2. Change the value for the SecuredPort to a different, unused port number. The Secure Gateway does not permit port sharing.

3. Save the file.

Refer to the InTouch Access Anywhere Secure Gateway Administrator Guide, located in the AVEVA Documentation folder for additional information.

If Microsoft IIS is running on the same server that will host the Secure Gateway, either change the IIS ports to values other than 80 and 443, or change the Secure Gateway port to a value other than 443 and disable the HTTP auto redirect feature after the installation. If there is a port conflict on either the HTTP or HTTPS port, the Secure Gateway does not operate properly.