Default Ports Used by the Denodo Platform Modules

The table below lists the TCP/IP ports that each module of the Denodo Platform listens for incoming connections.

Consider this:

  • These ports need to be free (not used by other applications).

  • If the Denodo Platform is behind a firewall, open the appropriate ports (see the list below the table).

  • These are the default port numbers. They can be changed during the installation process or later, in the administration tool of each module.

Default TCP/IP port numbers opened by the Denodo Platform modules


Default Port

Virtual DataPort and ITPilot Wrapper Server

Server ports (for Virtual DataPort administration tools, JDBC clients and monitoring applications - JMX)

9999 and 9997

ODBC port


Shutdown port (only reachable from localhost)


ITPilot Browser Pool

Server ports

6001 and 6003

Shutdown port (only reachable from localhost)


Initial Microsoft Internet Explorer browser port


The Browser Pool listens to this port to communicate with the first opened browser. The consecutive ascending port numbers will be used when additional browsers are requested.

For example, if the size of the Browser Pool is set to 30, the Browser Pool will listen in the port range from 6001 to 6030.

ITPilot Verification Server

Server ports

7001 and 7003

Shutdown port (only reachable from localhost)


ITPilot PDF Conversion Server

Server port


Scheduler Server

Server ports

8000 and 7998

Shutdown port (only reachable from localhost)


Scheduler Index Server

Server ports

9000 and 8998

Shutdown port (only reachable from localhost)


Denodo Platform Web container (Scheduler and ITPilot Administration Tools, Virtual DataPort Web services, Data Catalog and Diagnostic & Monitoring Tool)

Web container port

9090 for HTTP connections

9443 for HTTPS connections

Shutdown port (only reachable from localhost)


Monitoring ports (JMX)

9098 and 9097

Several components of Denodo use two ports to listen to connections. Both are necessary and if the server is behind a firewall, both need to be opened in the firewall so the client applications can successfully connect to both.

The monitoring interface of the Denodo components uses JMX. This Java technology uses the JRMP protocol, which opens an ephemeral port for internal use. This port cannot be disabled but if a client tries to connect to it from a another computer, the connection will be rejected.

Ports to Open on a Firewall

If the Denodo Platform runs behind a firewall, open the following ports in the firewall. If the Denodo Platform runs on Windows, remember to open the ports on the Windows Firewall as well.

  • 9999 and 9997: to allow connections from JDBC clients and the administration tool of Virtual DataPort. These ports are also used by the monitoring interface of Virtual DataPort (JMX). This is necessary so the Diagnostic & Monitoring Tool of the Solution Manager can connect and also for JMX clients like Oracle Java Mission Control or JVisualVM.

  • 9996: to allow connections from ODBC clients of Virtual DataPort.

  • 9090: to allow HTTP connections from client applications/browsers to the web applications and web services.

  • 9443: to allow HTTPS connections from client applications/browsers to the web applications and web services. HTTPS is disabled by default but we strongly suggest enabling it and using it instead of HTTP.

In addition, you may consider opening the following ones:

  • 9098 and 9097: to monitor - from another computer - the web container of Denodo.

The other ports do not need to be opened on the firewall because they are accessed locally. For example, the Scheduler administration tool connects to the Scheduler server but because the administration tool and the server run on the same machine, the firewall does not intercept the network traffic between them.

Add feedback