If you're configuring ArcGIS Enterprise in an environment where there is no internet connection or internet access is prohibited by your organization, you must configure the organization accordingly by updating HTTPS settings, disabling external content, and configuring your own utility services.
Configure HTTPS settings
When setting up your portal in a disconnected environment, you will need to ensure that the portal trusts certificates from your certifying authority. See Configure the portal to trust certificates from your certifying authority for details.
Disable social media links
Since Facebook and Twitter links require external access to the internet, you must disable the option to include social media links on item and group pages. By default, this option is disabled. If this option was enabled after installation, complete the following steps to disable it:
- Sign in to the organization as an administrator or member with privileges to manage the organization website.
- Click Organization and click Settings.
- Click the Security tab.
- In the Sharing and searching section under Policies, turn off the toggle button for Show social media links on item and group pages.
Point the portal to local resources
The items that you'll need to point to local resources include the portal's utility services and website-specific properties. The utility service settings are configured through the portal. The website has its own configuration files, which you must modify.
Disable external content
Because some Esri content requires external access to the internet, you must disable the content to prevent requests to ArcGIS Online resources. When disabling the content, a select group of items will be disabled:
- All basemaps owned by "esri_[lang]"
- All content owned by "esri_nav"
- All content owned by "esri"
To disable external content, complete the following steps:
- Sign in to the Portal Administrator Directory as an administrator of your organization.
The URL is in the format https://webadaptorhost.domain.com/webadaptorname/portaladmin.
- Click System > Content > External Content > Update.
- Ensure the False option is selected and click Update.
Once external content has been disabled, you must specify a custom group whose basemaps will be shown in the basemap gallery.
Configure custom basemaps
ArcGIS Enterprise organizations come preconfigured with a collection of basemaps from ArcGIS Online. These basemaps are not supported for use in a disconnected environment. Instead, create custom basemaps and configure your organization to offer these basemaps in the basemap gallery.
See Customize basemaps for details about creating and configuring custom basemaps in ArcGIS Enterprise.
ArcGIS Living Atlas of the World content
ArcGIS Living Atlas of the World is a collection of ready-to-use geographic content available from ArcGIS Online. It can be disabled from your portal for disconnected environments. However, you can still use ArcGIS Living Atlas boundary layer content in a disconnected environment by downloading files from My Esri and publishing them as feature layers.
Configure your own utility services
To learn how to update the utility services to point to local services, see Configure utility services for full instructions. The following provides an overview of the necessary changes.
Print service—When you click Print in Map Viewer or Map Viewer Classic, the print service is used to preview and print the map. By default, the service originates from ArcGIS Online. In a disconnected environment, you must configure your organization to use a print service from an ArcGIS Server site; otherwise, you won't be able to print and preview web maps. The service can be the ArcGIS Server site's preconfigured print service or a custom print service hosted on the server.
If you specify a hosting server for your organization, the hosting server's print service is automatically configured with the portal. You'll only need to start and share the print service to use it in your organization. However, if you've previously configured a print service with your portal, the URL is not updated when specifying a hosting server. You'll need to start the service, share the service, and configure it as a utility service.
Geocode service—ArcGIS Enterprise organizations are preconfigured to use the ArcGIS World Geocoding Service hosted by ArcGIS Online, which allows you to find and map a specified address or place-name. In a disconnected environment, you must set up your own ArcGIS Server geocode service to find addresses.
Geometry service—Geometry services perform the calculations necessary to do such spatial analysis as buffering and calculating area. ArcGIS Enterprise organizations use an ArcGIS Online geometry service by default. In a disconnected environment, you must set up your own ArcGIS Server geometry service. The service can be an ArcGIS Server site's preconfigured geometry service or a custom geometry service hosted on the server.
Route service—Route services allow you to find directions between two or more locations. The route utility service is used for the Directions functionality available in web maps. By default, there is no route service configured with ArcGIS Enterprise organizations. To get directions from Map Viewer or Map Viewer Classic in a disconnected environment, you must publish your own ArcGIS Server route service.
Adjust ArcGIS Online originated features
Update the following website properties using the Portal Directory. To learn more, see Set advanced portal options.
extentService: "<URL to local map service>",—The extent service is used to update or set the extent of a web map item on the Set Extent dialog box in the portal. By default, the extent service originates from ArcGIS Online. In a disconnected environment, you must configure your portal with a GIS Server tiled map service. The service must use the WGS84 geographic coordinate system with well-known ID (WKID) 4326.
gcsBasemapService: "<URL to local map service>",—The GCS basemap service is used as the basemap for OGC WMS services that do not support the Web Mercator coordinate system. By default, the GCS basemap service originates from ArcGIS Online. In a disconnected environment, you must configure your portal with a GIS Server map service. The service must use the WGS84 geographic coordinate system with well-known ID (WKID) 4326.
configurePortalAGOEnv: "www.arcgis.com",—Used to determine the proxy used for configured utility services. The default proxy for configured utility services is www.arcgis.com. In a disconnected environment, set this property to false.
portalAGOConfigEnabled: true,—Controls the display of the ArcGIS Online tab in the Organizations Settings page. In a disconnected environment, set this property to false. To disable access to ArcGIS Living Atlas content, follow the steps to disable access to ArcGIS Living Atlas content in your organization, set this property to false.
portalLivingAtlasConfigEnabled: true,—Together with the portalAGOConfigEnabled property, this property controls the display of the Configure Living Atlas Content section within the ArcGIS Online tab in the Organizations Settings page. In a disconnected environment, follow the steps to disable access to Living Atlas content in your organization, then set this property to false.
searchArcGISOnlineEnabled: false,—With this property, you can disable the option in Map Viewer Classic and Map Viewer to search for and add layers from ArcGIS Online. The default is true. When disabled, the options to search for and add layers from ArcGIS Online will be hidden in Map Viewer Classic and Map Viewer.
The locally hosted API can also be used to preview ArcGIS Server services in the Services Directory. See Connect the ArcGIS Server Services Directory to your portal for details.
Check for software patches and updates
You can check whether updates are available for ArcGIS Enterprise components using the patchnotification utility installed with the software. To download patches as appropriate, the utility requires access to these locations:
If your machine uses a forward proxy to access the internet, you'll need to specify the proxy server in the utility. For more information, see Check for and install software patches and updates.
Install the Survey123 website
You can host your own version of the Survey123 website in a disconnected environment using the Survey123 website installer, which you download from My Esri. Each installation includes the following:
- The Survey123 website for management of surveys and viewing of survey results.
- The Survey123 REST API to convert survey configurations (.xlsx) to forms for use in the Survey123 field and web apps.
The Survey123 website can be installed on the same machine as your Portal for ArcGIS instance or on a stand-alone web server. For instructions, see Install ArcGIS Survey123.