Security groups setup

Once the VPC Setup is complete, you need to configure the security group.

Note
To minimize risk, you must follow the principle of least privilege by opening only the necessary ports and network connections required for the TIE Server to operate properly. Following this best practice helps ensure both smooth operation and strong security.

Task

Log on to the AWS console.
Search for ‘Security groups’ in the search field, then select the result.
Click Create security group.
Note
You do not need to create a new security group each time. You can assign an existing security group to new TIE Server instances.
Enter the Name, Description and select the created VPC from the dropdown list.
Set the inbound rules.
Inbound ports
Protocol
Description
22
TCP
SSH access
80
TCP
HTTP communication
443
TCP
HTTPS communication
5432
TCP
PostgreSQL communication
8081
TCP
ePO/Agent Handler communication
8883
TCP
DXL communication
Note
If you plan to use a different port for DXL communication during the TIE Server configuration process, change the port for DXL communication. By default, DXL communicates on port 8883.

Set the outbound rules.

Port	Protocol	Description
22	TCP	SSH access
80	TCP	HTTP communication
123	UDP	NTP time server access
443	TCP	HTTPS communication
5432	TCP	PostgreSQL communication
8443	TCP	ePO/Agent handler communication
8883	TCP	DXL communication

Important
For a secure process, set the source for both inbound and outbound rules in your TIE Server's Security Group to match the IP range or address of your VPC. If your VPC allows public access, further restrict the source to known IP addresses within the Security Group to enhance security. We recommend that you only allow connections from trusted sources.

For a complete list of ports required for communication, see KB83713.

Click Create security group.

Improper configuration of Security Groups can lead to the following key issues for the TIE Server:

Functionality Issues: This might block necessary ports, preventing the TIE Server from connecting to essential resources and affecting its performance.
Security Exposure: Overly permissive Security Groups can expose your organization's data or systems to unauthorized access.