Orchestration Settings

Orchestration Settings

• Idle Time (reduced Orchestration time)
• 30 is best for environments less than 100 appliances
• 60 is best for environments over 100 appliances

• 🚧

  Auto flow reclassify - 60 (default) Can be reduced for faster HA appliance failover time, consult with SE before changing this.

  A Burst of Flows can cause a crash if this is set too low - a internal security scan for example.

  A future enhancement will negate this setting affecting failover times.

🚧

Firewall rules needed if EC is behind organization Firewall

1. UDP IN/OUT for tunnel traffic ports used above
   1. Must bypass all inspection/scanning blades or performance will suffer, tunnel traffic is encrypted
2. TCP 443 OUT to internet
   1. Can restrict to cloud portal and Orchestrator URL
   2. MUST bypass SSL inspection
3. See Firewall Rules for more details

• IPSec UDP Settings - Increment Port by 10 (default) Applies to appliances with same site name.

•