Connect databases via VPN
While Adobe recommends that you connect your databases using an SSH tunnel
, you can also use an encrypted VPN
connection to keep things secure. A VPN
can be used for any of your database integrations and, to keep things simple, the process is just about the same as setting up an SSH tunnel
:
In addition to database credentials, you must enter credentials for a VPN user to wrap things up. Any VPN user works, but Adobe recommends you create an Commerce Intelligence user, as it makes it easier for you to track the users on your account.
Creating a database user for Commerce Intelligence database
The process for creating a database user varies depending on the database type you are connecting. To see the instructions for each database type, click the links below.
Creating a VPN
user for Commerce Intelligence vpn
As mentioned before, any valid VPN
user works - but Adobe recommends you create a user solely for Commerce Intelligence use.
Allow access to the Commerce Intelligence IP addresses allowlist
For the connection to be successful, you must configure your firewall to allow access from your IP addresses. They are 54.88.76.97
and 34.250.211.151
, but it is also on the credentials
page for any database integration:
Entering the connection and VPN
user info into Commerce Intelligence finish
To wrap things up, you need to enter the connection and user info into Commerce Intelligence. Did you leave the database credentials
page open? If not, go to Manage Data > Connections. Click Add New Data Source, and then click the icon for the database you are connecting. Do not forget to change the Encrypted
toggle to Yes
.
Enter the following info into this page, starting with the Database Connection
section:
-
Username
: The username for the Commerce Intelligence database user -
Password
: The password for the Commerce Intelligence database user -
Port
: The database’s port on your server. Defaults are:MicrosoftSQL
:1433
MongoDB
:27017
MySQL
:3306
PostgreSQL
:5432
-
Host
: By default, this is localhost127.0.0.1
, but it could also be your server’s public IP address or a local area network address. -
Database Name (optional)
: If you only allowed access to one database (this is specified during the database user creation step), enter the name of that database here.
Under the Encryption Connection
section:
Encryption Type
: Set this toCisco IPsec VPN
Gateway Address
: The IP address of the VPN serverGroup Name
: The name of the group used for group authenticationGroup Secret
: The password corresponding to the group.Username
: The Commerce IntelligenceVPN
usernamePassword
: The Commerce IntelligenceVPN
user password
When you are finished, click Save & Test to complete the setup.