CC-SG offers three connection modes for in-band and out-of-band connections: Direct, Proxy, and Both.
Direct mode allows you to connect to a node or port directly, without passing data through CC-SG. Direct mode generally provides faster connections.
Proxy mode allows you to connect to a node or port by passing all data through CC-SG. Proxy mode increases the load on your CC-SG server, which may cause slower connections. However, Proxy mode is recommended if you are more concerned about the security of the connection. You need to keep the CC-SG TCP ports 80, 8080, 443, and 2400 open in your firewall.
Note: Beginning with CC-SG 4.2, proxy mode supports encryption of KVM data when using Dominion KXII release 2.1.10 and higher. In this configuration, KVM data is encrypted according to the security setting in the KXII device. Encryption is not supported with devices other than Dominion KXII 2.1.10.
Both mode allows you to configure CC-SG to use a combination of Direct mode and Proxy mode. In Both mode, Proxy mode is the default, but you can configure CC-SG to use Direct mode when connections are made using client IP addresses in specified ranges.
Note: Some interfaces only work in Direct mode even though you configure CC-SG to use Proxy mode. These interfaces include ILO, RSA, Microsoft RDP, DRAC, Web Browser and VMware Viewer. Java RDP interfaces can be used in proxy mode. See About Interfaces.
