---
title: Create the security group
description: You must create a security group for the following ports used by ASE:
component: pingintelligence
version: 5.1
page_id: pingintelligence:api_security_enforcer:pingintelligence_create_security_group
canonical_url: https://docs.pingidentity.com/pingintelligence/5.1/api_security_enforcer/pingintelligence_create_security_group.html
revdate: April 3, 2024
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Create the security group

## About this task

You must create a security group for the following ports used by ASE:

* **Port 80:** Accessible by API Clients/ELB

* **Port 443:** Accessible by API Clients/ELB

* **Port 8010:** Accessible by operations to execute CLI commands and REST API calls.

* **Port 8020:** Only accessible by peer ASE nodes in the same security group.

## Steps

Create a security group based on the following table:

| **Type**   | **Protocol** | **Port** | **Source**          |
| ---------- | ------------ | -------- | ------------------- |
| Custom TCP | TCP          | 80       | API clients/ELB     |
| Custom TCP | TCP          | 443      | API clients/ELB     |
| Custom TCP | TCP          | 80       | Same security group |
| Custom TCP | TCP          | 443      | Same security group |
| Custom TCP | TCP          | 8010     | Same security group |
| Custom TCP | TCP          | 8020     | Same security group |