External communication

Define the following ports to your firewall protecting the z/OS® host, as they are used for client-host communication (using the tcp protocol):
  • (z/OS Explorer) RSE daemon for client-host communication setup, default port 4035. The port can be set in the rse.env configuration file. Communication on this port can be encrypted.
  • (z/OS Explorer) RSE server for client-host communication. By default, any available port is used, but this can be limited to a specified range with the _RSE_PORTRANGE definition in rse.env. The default port range for _RSE_PORTRANGE is 8108-8118 (11 ports). Communication on this port can be encrypted.
  • (z/OS Debugger) Debug manager for debugger services, default port 5335. The port can be set in the DBGMGR started task JCL. Communication on this port can be encrypted.
  • CICS® PIPELINE port for ZUnit CICS recorder. There is no default. The port can be set in the CICS CSD. Communication on this port can be encrypted.
  • Either INETD service for remote (host-based) actions in z/OS UNIX subprojects:
    • REXEC (z/OS UNIX version), default port 512.
    • SSH (z/OS UNIX version), default port 22. Communication on this port is encrypted.
  • TN3270 Telnet service for the Remote Connect Emulator, default port 23. Communication can be encrypted (default port 992). The default port assigned to the TN3270 Telnet service depends on whether or not the user chooses to use encryption.
  • Host-based code coverage can be instructed to connect to the Engine of a Developer for z/OS client. Communication on this port can be encrypted. Note that in this scenario, the z/OS-based code coverage collector is a client for TCP/IP and the Engine on the user’s personal computer is a server for TCP/IP. The default is to work with z/OS Debugger locally on the same host.
Note: Normally the client specifies which TCP/IP address is used to connect to the host. However, to ensure that debug sessions communicate with the correct host, the Debug Manager dictates to the client which TCP/IP address must be used.