Open topic with navigation

TIBCO iProcess® Engine 11.10.0

# Configuring Security Groups When iProcess Workspace (Windows) Is Installed in AWS

To connect to TIBCO iProcess Engine and configure security groups, perform the following steps:

| 1. | Start an Elastic Compute Cloud (EC2) instance in your Virtual Private Cloud (VPC).

| 2. | Name the created instance `ec2-OracleServer` and install the Oracle Database Server on this instance.

| 3. | Start a second EC2 instance in your VPC.

| 4. | Name the created instance `ec2-iPE` and install iProcess Engine on this instance.

| 5. | Start a third EC2 instance in your VPC.

| 6. | Name the created instance `ec2-iPWW` and install iProcess Workspace (Windows) on this instance.

| 7. | Create the following security groups for all three EC2 instances.

| — | sg-OracleServer for the ec2-OracleServer instance.

| — | sg-iPE for the ec2-iPE instance.

| — | sg-iPWW for the ec2-iPWW instance.

| 8. | Configure sg-OracleServer

| a. | Specify a custom TCP rule so only the machines on an external domain can access the Oracle Database Server (The default port is 1521.)

| b. | Specify a rule on ec2-OracleServer for iProcess Engine to communicate with the database server.

Type | Protocol | Port Range | Source | Description
Custom TCP Rule | TCP | 22 | Custom | 192.0.2.0/32 | SSH to access the VM
All TCP | TCP | 0-65535 | Custom | sg-iPE | To allow traffic from members of sg-iPE
Oracle Database Server | TCP | 1521 | Custom | 192.0.2.0/32 | To access the Oracle database from an external machine

Note: 192.0.2.0/32 is used as an example IP address. Replace this with your IP address.

| 9. | Configure sg-iPE

| a. | Specify a rule on ec2-iPE for the database server to communicate with iProcess Engine.

| b. | Specify a rule on ec2-iPE for iProcess Workspace (Windows) to communicate with iProcess Engine.

Type | Protocol | Port | Source | Description
Custom TCP Rule | TCP | 22 | Custom | 192.0.2.0/32 | SSH
All TCP | TCP | 0-65535 | Custom | sg-OracleServer | To allow traffic from members of sg-OracleServer
All TCP | TCP | 0-65535 | Custom | sg-iPWW | To allow traffic from members of sg-iPWW

Note: 192.0.2.0/32 is used as an example IP address. Replace this with your own IP address.

| 10. | Configure sg-iPWW

| a. | Specify a rule on ec2-iPWW for iProcess Engine to communicate with the iProcess Workspace (Windows).

| b. | Specify Remote Desktop (RDP) rule for access to ec2-iPWW from an external domain.

Type | Protocol | Port Range | Source | Description
RDP | TCP | 3389 | Custom | 192.0.2.0/32 | Remote Desktop Connection

Note: 192.0.2.0/32 is used as an example IP address, replace this with your own IP address.

After configuring these security groups, your setup looks something like the following illustration.

Did you find this helpful?

Yes No
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO iProcess® Engine

Copyright © 1994-2025. Cloud Software Group, Inc. All Rights Reserved.