About Connection Modes

CC-SG offers three connection modes for in-band and out-of-band connections: Direct, Proxy, and Both.

• Direct mode allows you to connect to a node or port directly, without passing data through CC-SG. Direct mode generally provides faster connections.
• Proxy mode allows you to connect to a node or port by passing all data through CC-SG. Proxy mode increases the load on your CC-SG server, which may cause slower connections. However, Proxy mode is recommended if you are more concerned about the security of the connection. You need to keep the CC-SG TCP ports 80, 8080, 443, and 2400 open in your firewall.

  Note: Beginning with CC-SG 4.2, proxy mode supports encryption of KVM data when using Dominion KXII release 2.1.10 and higher. In this configuration, KVM data is encrypted according to the security setting in the KXII device. Encryption is not supported with devices other than Dominion KXII 2.1.10.

• Both mode allows you to configure CC-SG to use a combination of Direct mode and Proxy mode. In Both mode, Proxy mode is the default, but you can configure CC-SG to use Direct mode when connections are made using client IP addresses in specified ranges.

Note 1: When CC-SG is in Proxy or Both mode, you can give users access to virtual media on KXII devices. However, users can only use VKC in Proxy or Both mode. MPC is not supported in Proxy mode.

Note 2:

Some interfaces only work in Direct mode even though you configure CC-SG to use Proxy mode. These interfaces include ILO, RSA, DRAC, Web Browser and VMware Viewer. See About Interfaces.