CA Advanced Authentication Highly Available Architecture DMZ Web

CA Advanced Authentication Highly Available Architecture DMZ Web Tier Load Balancer Web & App Servers Mobile Device w/CA Mobile OTP Sobeys AD TCP 9743 / 9745 7777 / 7980 8443* TCP 9743 / 9745 Hardware Load Balancer 7777 / 7980 8443* Data Center 2 Admin UI Agent Administrator DMZ Web & App Servers CA Adv Auth. N Servers Agent Web Tier Load Balancer CA Adv Auth. N Servers Sobeys AD TCP 9743 / 9745 7777 / 7980 8443* TCP 1443 Web Apps (UIs) Replication TCP LDAPs 636 TCP 9742 / 9744 7680/ 7778 SSL – 7681 UI – 8443* CA Advanced Auth. N Databases SA RA CA Adv Auth. N Servers Agent CA Auth. N ID TCP 9742 / 9744 7680/ 7778 SSL – 7681 UI – 8443* Agent End User WAN Load Balancer Data Center 1 LDAPs 636 SA RA TCP CA Adv Auth. N Servers 9743 / 9745 Hardware Load Balancer 7777 / 7980 8443* Web Apps (UIs) TCP 1443 CA Advanced Auth. N Databases

Port configuration info CA Strong Authentication Server CA Risk Authentication Server Protocol Default Port Number Default Status Protocol Default Port Number Server Management Web Services 9743 Enabled (internal comms) Native (TCP) 7680 Transaction Web Services 9744 Enabled Native (SSL) 7681 Administration Web Service 7777 Transaction Web Service 7778 Server Management 7980 Transaction Native 9742 Enabled (internal comms) Administration Web Services 9745 Enabled (internal comms) RADIUS 1812 Disabled Transaction HTTP 9746 Disabled * Admin UI ports – default 8443, configurable