Firewalls and proxy servers – XClarity Orchestrator
Some service and support functions, including Call Home and warranty status, require access to the Internet. If you have firewalls in your network, configure the firewalls to enable XClarity Orchestrator to perform these operations. If XClarity Orchestrator does not have direct access to the Internet, configure XClarity Orchestrator to use a proxy server.
Firewalls
Ensure that the following DNS names and ports are open on the firewall.
| DNS name | IPv4 address | IPv6 address | Ports | Protocols |
|---|---|---|---|---|
| Download updates (management-server updates, firmware updates, UpdateXpress System Packs (OS device drivers), and repository packs) | ||||
| datacentersupport.lenovo.com | N/A | N/A | 443 and 80 | https |
| download.lenovo.com | N/A | N/A | 443 and 80 | https |
| filedownload.lenovo.com | N/A | N/A | 443 and 80 | https |
| support.lenovo.com | N/A | N/A | 443 and 80 | https and http |
| supportapi.lenovo.com | N/A | N/A | 443 and 80 | https |
| Send service data to Lenovo Support (Call Home) | ||||
| soaus.lenovo.com | N/A | N/A | 443 | https |
| supportwebapi.lenovo.com:443/luf.luf-web.prd/BLL/Logupload.ashx (XClarity Orchestrator v1.5 and earlier) rsgw-eservice.motorola.com (XClarity Orchestrator v1.6) esupportwebapi.lenovo.com (XClarity Orchestrator v2.0 and later) | N/A | N/A | 443 | https |
| Send periodic data to Lenovo | ||||
| supportwebapi.lenovo.com:443/luf.luf-web.prd/BLL/uploadSnapshot.ashx (XClarity Orchestrator v1.5 and earlier) rsgw-eservice.motorola.com (XClarity Orchestrator v1.6) esupportwebapi.lenovo.com (XClarity Orchestrator v2.0 and later) | N/A | N/A | 443 | https |
| Retrieve warranty information | ||||
| ibase.lenovo.com | N/A | N/A | 443 | https and http |
| supportapi.lenovo.com | N/A | N/A | 443 | https and http |
Proxy server
If XClarity Orchestrator does not have direct access to the Internet, ensure that it is configured to use an HTTP proxy server (see Configuring the network).
- Ensure that the proxy server is set up to use basic authentication.
- Ensure that the proxy server is set up as a non-terminating proxy.
- Ensure that the proxy server is set up as a forwarding proxy.
- Ensure that load balancers are configured to keep sessions with one proxy server and not switch between them.