Firewall requirements

This topic describes the firewall requirements for Db2 Query Monitor.

The Db2 Query Monitor Windows service, cqmservice.exe, requires full access to your network. The cqmservice.exe executable file is used by the CAE Server for normal installations, used by the Primary CAE Server in high-availability and fault-tolerant installations, and is also used by the watchdog service on the Backup CAE Servers.

You must configure your firewall to provide cqmservice.exe with full access to your network. The cqmservice.exe executable file is located in the bin\jre\bin folder of the Db2 Query Monitor installation, for example: C:\Program Files\IBM\DB2 Query Monitor 3.4.0\bin\jre\bin.

Notes:
  1. Some firewall applications require that you explicitly allow CAE components access to the PC on which they reside.
  2. In the Windows XP SP2 environment, when the Windows Firewall is turned on, the CAE Browser Client cannot receive any data if the CAE Server is started in Windows Service Mode, but it can receive data if the CAE Server is started normally (by executing the bat file in bin directory of Db2 Query Monitor installation directory).

You must also configure your firewall to allow the appropriate TCP inbound and outbound protocols for the ports used by the CAE Agent, CAE Server, and CAE Browser Client.