F-SECURE POLICY MANAGER 9.0 Administrator's Manual page 86

86 | F-Secure Policy Manager | Troubleshooting
Question
How can I change the ports where the server listens
for requests?
Answer
problems are fixed by updating the network drivers to
the latest version in the affected machines or by
reconfiguring the new switch and the network cards
on the Policy Manager Console and Policy Manager
Server machines.
If Policy Manager Console is installed on the same
computer as Policy Manager Server, then there is a
risk that Policy Manager Server could be under such
a heavy network load that it does not have any free
network connections available. Policy Manager
Console and all hosts are competing for the same
network resources.
With the default settings, Policy Manager Server can
only handle 150 simultaneous connections. You can
increase the number of simultaneous connections by
increasing ThreadsPerChild value in the
httpd.conf file and restarting the Policy Manager
Server after that. Other possible solutions are to
increase the polling intervals of hosts, to change the
Windows networking timeouts shorter, or to increase
the number of Windows networking ports.
Useful Windows networking settings are:
HKLM\SYSTEM\CurrentControlSet\Services
\Tcpip\Parameters\MaxUserPort (maximum
number of network ports, default = 5000)
HKLM\SYSTEM\CurrentControlSet\Services
\Tcpip\Parameters\TcpTimedWaitDelay (time
to wait before closing inactive network connection,
default = 240 seconds).
The netstat -an command can be used to check
whether there are too many connection open to the
server.
By default, the Policy Manager Server admin module
(the component that handles requests coming from
Policy Manager Console) listens in port 8080, and the
Policy Manager Server host module (the component
that handles requests from workstations) listens in
port 80. These can be changed during installation.
If you need to change the port numbers after
installation:
1. Stop Policy Manager Server.
2. Open the
HKEY_LOCAL_MACHINE\SOFTWARE\Data
Fellows\F-Secure\Management Server 5
registry key.
3. Edit the AdminPortNum (admin module) and
HttpPortNum (host module) values and enter the
new port numbers.