Build and Maintain a Secure Network and Systems

Requirement 1: Install and maintain a firewall configuration to protect cardholder data

The Omni-Insurance products should be installed on an internal (trusted) network segment.
Data acquisition channels for bringing data into the Omni-Insurance on-ramps should be configured through the Demilitarized Zone (DMZ). If the client is using the Information Builders iWay 8 product for integration services on the data acquisition, then the PCI compliance chapter in that document will provide more information on configuring Integration channels within and outside of the DMZ.
TCP/IP listener ports are required for the Omni server and applications to communicate internally and externally. The ports are configurable by the user and can be changed during the product installation.

Omni-Insurance Ports

The following table lists the default Omni-Insurance ports and their use.

Component	Type	Port	Security
Omni Controller/Console	external	9500	TLS 1.2
Omni Server	internal	9514	TLS 1.2
Omni Server Data Quality High-Speed TCP	internal	9532	none
Data Quality Cleanse	external	9504	none
Data Quality Cleanse	internal	9505	none
Data Quality Match	external	9506	none
Data Quality Match	internal	9507	none
Data Quality Merge	external	9508	none
Data Quality Merge	internal	9509	none
Data Quality Remediation	external	9510	none
Data Quality Remediation	internal	9511	none
OGC Tomcat Shutdown	internal	9524	none
OGC Tomcat Console	external	9501	Tomcat Config
OGC Tomcat AJP	internal	9525	Tomcat Config
OGC WSO2	external	9503	WSO2 Config
OGC Redirect	internal	9526	none
OGC Logstash	internal	9528	none
WSO2 RMI Registry	internal	9534	WSO2 Config
WSO2 RMI Server	internal	9535	WSO2 Config
WSO2 LDAP Server	internal	9536	WSO2 Config
WSO2 KDC Server	internal	9537	WSO2 Config
WSO2 Thrift Entitlement Receiver	internal	9538	WSO2 Config
Omni Designer Tomcat	internal	9515	TLS 1.2
Omni Designer Console	external	9516	TLS 1.2
Omni Designer Redirect	internal	9518	TLS 1.2
Omni Designer AJP	internal	9517	Tomcat Config
Omni Designer Bridge	internal	9519	Tomcat Config
Omni Designer EMF	internal	9520	TLS 1.2
Deployment Console	external	9521	none
Deployment Console	external	9502	TLS 1.2
GIT/SVN	external	80/(8800,8443)	Repository Config