Native
Overview
The Native API mode is only used at Microsoft CA communication. It uses the RPC based
protocol for communication and sends a DCOM message.
- In this mode, communication between the Windows Agent Machine and the target machine is through RPC and DCOM.
- This mode requires permission which is applicable for WMI, since it uses the same communication method.
- The difference between WMI and native mode is native mode uses, the native sdk provided by Microsoft for managing the CA. It doesn’t require drive access.
PORTS USED: 135, 145
Recommended Usage
- This is one of the oldest communication protocols used in Windows.
- This mode supports only CA related operations when using AppViewX Windows Gateway.
- The customer retains control of the credentials since they enter them directly during local logon. Additionally, they have the option to use a managed service account with this approach.
- Because the libraries are built by Microsoft, communication occurs more quickly in the native mode.
Permissions and Ports
The table below summarizes the different permissions and port requirements in Native:
| Requirement | AppViewX Windows Gateway | Target Server |
|---|---|---|
| User account type | Service account with local admin | Service account with local admin |
| Services | WMI Service certutil.exe command availability |
WMI Service certutil.exe command availability |
| Ports | 8999 (Customisable) 135 - RPC Port 49152-65535 - Dynamic Ports |
135 - RPC Port 49152-65535 - Dynamic Ports |