Install Guide

4–Security Considerations
Managing Security
Doc. No. TD-000966 Rev. 1
January 21, 2021 Page 34 Copyright © 2021 Marvell
Program Numbers Used for QConvergeConsole Agents
Program numbers will be mapped to dynamic ports that can be seen by means of
the rpcinfo -p command. The program numbers used for QConvergeConsole
agents are:
 Program 4397 for qlremote
 Program 4398 for QConvergeConsole FC HBA manager
 Program 351502 for iqlremote
 Program 351503 for QConvergeConsole iSCSI HBA manager
 Program 252525 for QLNXRemote (3400/8400/41000/45000 Series Adapter
management agent)
For example:
[root@rp-R800-RHEL65x64 ~]# rpcinfo -p 172.27.3.21
program vers proto port service
351504 1 tcp 871
351504 1 udp 869
4397 1 tcp 739
4397 1 udp 737
351502 1 tcp 959
351502 1 udp 957
351523 1 tcp 679
351523 1 udp 677
[root@rp-R800-RHEL65x64 ~]#
NOTE
Security Best Practices include:
 Changing the default password during QCC GUI installation to a strong
password that meets corporate security policy.
 Note that changing the QCC GUI password during installation also
updates the password for the Tomcat manager.
 Using a localhost only connection to restrict access to the QCC GUI and
Tomcat manager improves security.
 The Tomcat Manager GUI is disabled and returns an Access Denied
error if a user clicks on the Manager Application button.
 The Tomcat AJP is disabled to prevent the addition of unauthorized files
in the webapp directories.