The TCP/UDP ports BCAAA Authentication Agent use

Products

• ProxySG Software - SGOS

Issue/Introduction

These are the TCP/UDP ports BCAAA Authentication Agent use.

 

Resolution

.

Traffic initiated or terminated at the BCAAA. 

Direction	Communication	TCP/UDP/Others	Protocol (port)	Frequency	Data Exchanged / Transaction
Incoming ProxySG	IWA / Windows SSO / Novell SSO / SiteMinder / COREid / XML	TCP	BCAAA (16101)	Varies	Small
Outgoing BCAAA > AD	IWA (Aka Basic / NTLM Kerberos)	TCP/UDP	Use of Windows API over NetBIOS and SMB (137, 138, 139, 445)	Varies	Small
Incoming/Outgoing BCAAA	Synchronization between BCAAA Servers	TCP	BCAAA (16102)	Varies - enable/disable configurable	Few KBs
Outgoing BCAAA > AD or LDAP	Windows SSO Domain Controller Query	TCP/UDP	Use of Windows API over NetBIOS and SMB (137, 138, 139, 445)	Varies - enable/disable configuration	Small
Outgoing BCAAA > Client	Windows SSO Client Query	TCP/UDP	Use of Window API over NetBIOS and SMB (137, 138, 139, 445)	Varies – enable/disable configurable	Small
Incoming/Outgoing BCAAA > Novell LDAP	Novell SSO Query	TCP	Via LDAP (389) / (636)	Varies	Few KBs
Outgoing BCAAA > SiteMinder	CA eTrust SiteMinder	TCP	Use of SiteMinder SDK Authentication (44442) Authorization (44443) Accounting (44441)	Varies	Few KBs
Outgoing BCAAA > COREid	Oracle COREid	TCP	Use Oracle COREid SDK (Port is configurable)	Varies	Few KBs
Outgoing BCAAA > XML	XML	TCP	HTTP GET / POST (80)	Varies	Small