ArcGIS Server uses certain ports to communicate with machines on the Internet and intranet. Below is a description of the ports that you may need to allow on your firewall.
HTTP port 6080
ArcGIS Server initially communicates through port 6080, and you must ensure that your firewall allows HTTP communication through this port. If you don't want users of the server to know about or include port 6080 in their requests, the recommended action is to install ArcGIS Web Adaptor. See About the ArcGIS Web Adaptor to learn more.
HTTPS port 6443
When HTTPS is enabled, ArcGIS Server uses port 6443 by default. Unless you have disabled direct administrative access (routing traffic through your ArcGIS Web Adaptor instead), your users will be able to access the server through port 6443.
Internally used ports (1098, 6006, 6099, others)
Ports 1098, 6006, 6099, and other random ports are used by ArcGIS Server to start processes within each ArcGIS Server machine. You do not have to open these ports for access by other machines; however, you should be aware that ArcGIS Server is using them in case you run other applications that require the same ports.
If the ArcGIS Server installation detects that one of these ports is in use, it will automatically increment the port number it uses. For example, if it detects that another application is already using 1098, it will use 1099 if that port is available.
When ArcGIS Server is installed on a server machine, avoid using your firewall to obstruct internal communication within that machine.
If restrictive firewall policies are preventing your site from being created (usually evidenced by an error message Failed to create the service 'System/CachingTools.GPServer'), you can adjust your firewall to explicitly allow the ArcGIS Server processes. For example, with Windows Firewall, you can add new inbound rules that allow the following four programs:
- <ArcGIS Server installation location>\bin\ArcSOC.exe
- <ArcGIS Server installation location>\framework\etc\service\bin\ArcGISServer.exe
- <ArcGIS Server installation location>\framework\runtime\jre\bin\javaw.exe
- <ArcGIS Server installation location>\framework\runtime\jre\bin\rmid.exe
The Windows account running ArcGIS Server must also have access to the Command Prompt.
Ports used by ArcGIS GeoAnalytics Server
If you deploy ArcGIS Server as ArcGIS GeoAnalytics Server, ports 2181, 2182, 2190, 56540-56545, and 7077 will also be used for intermachine communications.