Skip to content

Commit 8ce5f9a

Browse files
authored
Merge pull request #402 from netwrix/dev
fixing last issue line being formatted as h2
2 parents c5c3666 + 2d022d2 commit 8ce5f9a

2 files changed

Lines changed: 22 additions & 37 deletions

File tree

.github/workflows/claude-documentation-reviewer.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,7 +133,7 @@ jobs:
133133
import sys
134134
135135
FOOTER = (
136-
"\n---\n\n"
136+
"\n\n* * *\n\n"
137137
"To apply suggested fixes to the updated documentation, individually or in bulk, comment `@claude`"
138138
" on this PR followed by your instructions (`@claude fix all issues`"
139139
" or `@claude fix all linting issues` or `@claude fix only the spelling errors`).\n\n"

docs/passwordsecure/9.3/installation/installation.md

Lines changed: 21 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -6,71 +6,56 @@ sidebar_position: 20
66

77
# Installation
88

9-
The following pages will provide you with all the information how to install the different Netwrix
10-
Password Secure components.
9+
This section covers how to install each Netwrix Password Secure component.
1110

1211
## System landscape
1312

14-
The following overview presents a basic production Netwrix Password Secure system landscape. Version
15-
9 allows the use of several database servers across all sites. These are then synchronized using
16-
Microsoft SQL server tools. Any number of application servers can be made available for the client
17-
connection. This ensures load distribution, and allows work without significant latency. This
18-
technology offers enormous performance advantages, particularly in the case of installations that
19-
are spread across worldwide locations.
13+
A basic production Netwrix Password Secure system landscape consists of the three tiers described below. Version 9 supports multiple database servers across all sites, and Microsoft SQL Server tools synchronize them. You can deploy any number of application servers to handle client connections, which distributes load and reduces latency. This is especially valuable for installations spread across multiple geographic locations.
2014

2115
## Client (presentation layer)
2216

23-
The client layer handles the representation of all data and functions, which are provided by the
24-
application server.
17+
The client layer handles the presentation of all data and functions that the application server provides.
2518

2619
## Application server (business logic)
2720

28-
The application server is entirely responsible for the control of the business logic. This server
29-
only ever delivers the data for which the corresponding permissions are available. The multi-tier
30-
architecture described at the beginning allows the use of several application servers and ensures
31-
efficient load distribution.
21+
The application server controls all business logic and only delivers data for which the corresponding permissions exist. The multi-tier architecture supports multiple application servers, ensuring efficient load distribution.
3222

3323
## Database server (data storage)
3424

35-
Netwrix Password Secure uses Microsoft SQL Server to store data due to its widespread use, and its
36-
ability to ensure high-performance access even in large and geographically scattered environments.
37-
Smaller installations may also use the free SQL Express version.
25+
Netwrix Password Secure uses Microsoft SQL Server for data storage, which provides high-performance access in large and geographically distributed environments. Smaller installations can use the free SQL Express edition.
3826

39-
## Conclusion
27+
## Recommended server configuration
4028

41-
At least three servers are thus recommended:
29+
Use a minimum of three servers:
4230

4331
- Database server (MSSQL)
4432
- Application server (Netwrix Password Secure services)
4533
- Web server (IIS, NginX, Apache 2)
4634

47-
**CAUTION:** For databases in a production system, we recommend using a fail-safe cluster. Microsoft
48-
SQL Server can replicate the data to a different data centre, e.g via WAN. We also recommend
49-
providing a Windows server for each function. Separating the systems makes it easier to expand and
50-
scale the system landscape at a later point. However, it is not absolutely necessary to separate the
51-
systems. Accordingly, all of the components can also be installed on one server in the case of
52-
smaller installations or test environments.
35+
:::warning
36+
For production systems, use a fail-safe database cluster. Microsoft SQL Server can replicate data to a different data center, for example via WAN. Also use a dedicated Windows Server for each role — separating roles makes it easier to expand and scale the environment later. For smaller installations or test environments, you can install all components on a single server.
37+
:::
5338

54-
### Firewall rules / Ports
39+
## Firewall rules and ports
5540

56-
## MSSQL Server
41+
### MSSQL server
5742

58-
- Port 1433 TCP for communication with application server (incoming)
43+
- Port 1433 TCP for communication with the application server (incoming)
5944

6045
### Application server
6146

6247
- Port 443 HTTPS for connection to the Netwrix Password Secure license server (outgoing)
63-
- Port 11011 TCP for communication with clients or web server IIS (incoming)
64-
- Port 11014 TCP for the backup service (usually does not need to be unlocked)
65-
- Port 11016 TCP for the Web services (incoming; only when using the Web Application)
66-
- Port 11018 TCP for real-time update (incoming)
48+
- Port 11011 TCP for communication with clients or the IIS web server (incoming)
49+
- Port 11014 TCP for the backup service (usually not required)
50+
- Port 11016 TCP for web services (incoming; only required when using the Web Application)
51+
- Port 11018 TCP for real-time updates (incoming)
6752
- Port 1433 TCP for communication with SQL Server (outgoing)
6853

69-
### Webserver (Web Application)
54+
### Web server (Web Application)
7055

71-
- Port 443 HTTPS to access the webserver from the client (incoming)
72-
- Port 11016 for communication to the application server (outgoing)
73-
- Port 11018 for the real-time update (outgoing)
56+
- Port 443 HTTPS to access the web server from the client (incoming)
57+
- Port 11016 for communication with the application server (outgoing)
58+
- Port 11018 for real-time updates (outgoing)
7459

7560
### Client
7661

0 commit comments

Comments
 (0)