BizTalk360 Dependent Ports and Protocols

BizTalk360, being a Middleware monitoring tool, it must deal with a lot of message transfer between different systems of BizTalk Server. In a typical enterprise level scenarios, the cluster of systems plays an important role in high availability. The Communication between different server systems happens from Server to a network and then to another system via ports/protocols. In a typical StandAlone (or) High-Availability monitoring scenarios where BizTalk360 is installed on a server different from actual BizTalk server. This enables the BizTalk Server to be monitored on 24×7 without any downtime on monitoring. Even if the BizTalk physical server goes down, BizTalk360 can send the down alert. This blog summarizes the basic ports/protocols that need to be granted an access to receive or send a message across the interconnected systems. As this is the best practice to install the BizTalk360, we need to make sure the BizTalk360 running servers should be enabled with below protocols/port number in the Windows Firewall to communicate with the BizTalk Server/Azure/any external services at runtime. Below is the list of basic ports/protocols utilized for all the features/services.

SQL Server:

As BizTalk Server Relies on the SQL server databases, connection to the SQL server is critical to fetch the Artifacts/any results via direct query or through BizTalk ExplorerOM. This SQL connectivity is responsible for a majority of the below functionalities. Database responsible for the above functionalities includes the below BizTalk databases and also BizTalk360 database.

DTC/WMI Port

BizTalk360 communicates with other windows services with the help of Windows Management Instrumentation. MSDTC- Microsoft Distribution Coordinator is responsible for moving the transaction from one system to another system. Make sure the Network DTC is also switched on to communicate with other remote servers and MSMQ. Also make sure MSDTC, WMI and RPC windows services are up and running.

Useful Microsoft Links

As the BizTalk360 server requires the same level of permissions like BizTalk server and the usage of the ports/protocols are pertinent to the Business architecture of every client, the below Microsoft links provides the port level segregation for different features that must be enabled on the Firewall to make BizTalk360 monitoring work seamlessly

Link	To help with
https://msdn.microsoft.com/en-us/library/aa561421.aspx	Ports for the Administration Server
https://msdn.microsoft.com/en-us/library/aa559018.aspx	Ports for the Receive and Send Servers
https://msdn.microsoft.com/en-us/library/aa560014.aspx	Ports for the Tracking Server
https://msdn.microsoft.com/en-us/library/aa546761.aspx	Ports for the Processing Servers
https://msdn.microsoft.com/en-us/library/aa559472.aspx	Ports for the Enterprise Single Sign-On Servers
https://msdn.microsoft.com/en-us/library/aa561492.aspx	Ports for the BAM Portal Server
https://docs.microsoft.com/en-us/azure/biztalk-services/integration-hybrid-connection-overview	Ports for Hybrid connections via the On-premise server
https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-ports	Ports for Hybrid connections active-directory based communications
https://assist.biztalk360.com/support/solutions/articles/1000092197-enable-msdtc-for-biztalk360-stand-alone-separate-server-configuration	Network DTC based settings
https://msdn.microsoft.com/en-us/library/cc959833.aspx	Ports For Commonly used services
https://technet.microsoft.com/en-us/library/aa559472(v=bts.20).aspx	Ports for SSO server
https://vikas15bhardwaj.wordpress.com/2014/08/22/multi-computer-biztalk-installation-on-one-computer-part-ii-install-and-configure-biztalk/	Multi server environment
https://gallery.technet.microsoft.com/Installing-BizTalk-Server-24b44193	Multi server environment ports
https://msdn.microsoft.com/en-us/library/ee350597.aspx	Global security accounts for Domain control based servers

Random/Custom Ports:

At run time, TCP ports are randomly picked up by the server, make sure the dynamically allocated ports are also being unblocked by the firewall. Also, make sure if custom ports are utilized for any service, unblock that as well from the firewall for the seamless working. Please refer Microsoft article for guidance. For firewall security recommendations please visit this msdn-link. Note: Generally, ports between 49152 to 65535 are Dynamic/Private Ports. You have to unblock these ports in the firewall for seamless communications.

Summary

BizTalk360 provides continuous support and suggestions to make the monitoring at your ease. This blog was one such effort to make sure our BizTalk360 users seamlessly follow best practices to make BizTalk monitoring an easier one.