If you're configuring ArcGIS Enterprise in an environment where there is no internet connection or internet access is prohibited by your organization, you must configure the organization accordingly by updating HTTPS settings, disabling external content, and configuring your own utility services.
Configure HTTPS settings
When setting up your portal in a disconnected environment, you will need to ensure that the portal trusts certificates from your certifying authority. See Configure the portal to trust certificates from your certifying authority for details.
Disable social media links
Since Facebook and X links require external access to the internet, you must disable the option to include social media links on item and group pages. By default, this option is disabled. If this option was enabled after installation, complete the following steps to disable it:
- Sign in to the organization as an administrator or member with privileges to manage the organization website.
- Click Organization and click Settings.
- Click the Security tab.
- In the Sharing and searching section under Policies, turn off the toggle button for Show social media links on item and group pages.
Point the portal to local resources
The items that you'll need to point to local resources include the portal's utility services and website-specific properties. The utility service settings are configured through the portal. The website has its own configuration files, which you must modify.
Disable external content
Because some Esri content requires external access to the internet, you must disable the content to prevent requests to ArcGIS Online resources. When disabling the content, a select group of items will be disabled:
- All basemaps owned by "esri_[lang]"
- All content owned by "esri_nav"
- All content owned by "esri"
To disable external content, complete the following steps:
- Sign in to the Portal Administrator Directory as an administrator of your organization.
The URL is in the format https://webadaptorhost.example.com/webadaptorname/portaladmin.
- Click System > Content > External Content > Update.
- Ensure the False option is selected and click Update.
Once external content has been disabled, you must specify a custom group whose basemaps will be shown in the basemap gallery.
Configure custom basemaps
ArcGIS Enterprise organizations come preconfigured with a collection of basemaps from ArcGIS Online. These basemaps are not supported for use in a disconnected environment. Instead, create custom basemaps and configure your organization to offer these basemaps in the basemap gallery.
See Customize basemaps for details about creating and configuring custom basemaps in ArcGIS Enterprise.
ArcGIS Living Atlas of the World content
ArcGIS Living Atlas of the World is a collection of ready-to-use geographic content available from ArcGIS Online. It can be disabled from your portal for disconnected environments. However, you can still use ArcGIS Living Atlas boundary layer content in a disconnected environment by downloading files from My Esri and publishing them as feature layers.
Configure utility services to use local services
ArcGIS Enterprise organizations are configured to use utility services to perform various tasks, including printing maps, locating addresses, calculating areas, and more. In disconnected environments, utility services must point to local services. Whether configured by your organization or by default, some of your organization's utility services may be using a service from ArcGIS Online.
To verify whether any of your organization's utility services must be updated to point to a local service, complete the following steps:
- Sign in to the organization as an administrator or a member with privileges to manage the organization website.
- Click Organization and click Settings.
- Click the Utility services tab.
- Review the sources of each utility service and take note of any that point to a service from ArcGIS Online.
Tip:
You can also review utility services that use services from ArcGIS Online from the ArcGIS Online tab. However, understand that this is not a comprehensive list. Routing services from ArcGIS Online and services that do not require ArcGIS Online credentials are configured only from the Utility services tab.
To learn more about the requirements and steps for configuring utility services to use local services, see Configure utility services.
Adjust ArcGIS Online originated features
Update the following website properties using the Portal Directory. To learn more, see Set advanced portal options.
extentService: "<URL to local map service>",—The extent service is used to update or set the extent of a web map item on the Set Extent dialog box in the portal. By default, the extent service originates from ArcGIS Online. In a disconnected environment, you must configure your portal with a GIS Server tiled map service. The service must use the WGS84 geographic coordinate system with well-known ID (WKID) 4326.
gcsBasemapService: "<URL to local map service>",—The GCS basemap service is used as the basemap for OGC WMS services that do not support the Web Mercator coordinate system. By default, the GCS basemap service originates from ArcGIS Online. In a disconnected environment, you must configure your portal with a GIS Server map service. The service must use the WGS84 geographic coordinate system with well-known ID (WKID) 4326.
configurePortalAGOEnv: "www.arcgis.com",—Used to determine the proxy used for configured utility services. The default proxy for configured utility services is www.arcgis.com. In a disconnected environment, set this property to false.
portalAGOConfigEnabled: true,—Controls the display of the ArcGIS Online tab in the Organizations Settings page. In a disconnected environment, set this property to false.
portalLivingAtlasConfigEnabled: true,—Controls the display of the Living Atlas tab in the Organizations Settings page. In a disconnected environment, follow the steps to disable access to Living Atlas content in your organization, then set this property to false.
searchArcGISOnlineEnabled: false,—With this property, you can disable the option in Map Viewer Classic and Map Viewer to search for and add layers from ArcGIS Online. The default is true. When disabled, the options to search for and add layers from ArcGIS Online will be hidden in Map Viewer Classic and Map Viewer.
ArcGIS Maps SDK for JavaScript
You can deploy your own version of the ArcGIS Maps SDK for JavaScript to build custom web applications in disconnected environments. For more information, see Use the SDK in a disconnected environment.
You can use resources from the portal to help preview ArcGIS Server services in the Services Directory in disconnected environments. For more information, see Connect the ArcGIS Server Services Directory to your portal.
Check for software patches and updates
You can check whether updates are available for ArcGIS Enterprise components using the patchnotification utility installed with the software. To download patches as appropriate, the utility requires access to these locations:
- https://gisupdates.esri.com/
- https://downloads.esri.com/
- https://support.esri.com/
If your machine uses a forward proxy to access the internet, you'll need to specify the proxy server in the utility. For more information, see Check for and install software patches and updates.
Install the Survey123 website
You can host your own version of the Survey123 website in a disconnected environment using the Survey123 website installer, which you download from My Esri. Each installation includes the following:
- The Survey123 website for management of surveys and viewing of survey results.
- The Survey123 REST API to convert survey configurations (.xlsx) to forms for use in the Survey123 field and web apps.
The Survey123 website can be installed on the same machine as your Portal for ArcGIS instance or on a stand-alone web server. For instructions, see Install ArcGIS Survey123.