-
Feature Request
-
Resolution: Unresolved
-
Major
-
None
-
2.5
-
False
-
-
False
1. What is the nature and description of the request?
A customer who is running EDA2.4 in Production today (and is a public reference) is unable to upgrade to EDA2.5 because of security requirements. Right now, Event Streams for the RPM-based installer is auto-created on port 443 to the Platform URL. This means if I set up a firewall rule for external access (for ServiceNow or Dynatrace, etc), I am granting full API/UI access to the entire Platform (while RBAC still applies, they are unable to accept this answer from a security posture). They request the ability to change the Event Stream URL port (via the installer or Platform API), to have a specific port for the Event Streams to alleviate this security issue
2. Why does the customer need this? (List the business requirements here)
- The customer Security team is unable to upgrade to EDA2.5 because of the security issues of having 443 for the entire platform being available externally (they would have specific IPs added to the allow list, but this is still unacceptable to the Security Team)
3. How would you like to achieve this? (List the functional requirements
here)
- Add a variable to the installer to allow end-users to change the default Event Stream port (keep 443 as the default)