---
title: Create the security group
description: You must create a security group for the following ports used by the API Security Enforcer (ASE):
component: pingintelligence
version: 5.2
page_id: pingintelligence:pingintelligence_reference_guide:pingintelligence_create_security_group
canonical_url: https://docs.pingidentity.com/pingintelligence/5.2/pingintelligence_reference_guide/pingintelligence_create_security_group.html
revdate: April 3, 2024
---

# Create the security group

You must create a security group for the following ports used by the API Security Enforcer (ASE):

* Port `80`: Accessible by API Clients/ELB

* Port `443`: Accessible by API Clients/ELB

* Port `8010`: Accessible by operations to execute command-line interface (CLI) commands and REST application programming interface (API) *(tooltip: \<div class="paragraph">
  \<p>A specification of interactions available for building software to access an application or service.\</p>
  \</div>)* calls

* Port `8020`: Only accessible by peer ASE nodes in the same security group

Create a security group based on the following table.

| Type       | Protocol | Port   | Source              |
| ---------- | -------- | ------ | ------------------- |
| Custom TCP | TCP      | `80`   | API clients/ELB     |
| Custom TCP | TCP      | `443`  | Same security group |
| Custom TCP | TCP      | `8010` | Same security group |
| Custom TCP | TCP      | `8020` | Same security group |