Server Administrator Guide
Security-Specific Features in ...
Transport Encryption
1 min
care should be taken to ensure swimlane traffic cannot be intercepted in transit swimlane web traffic should be secured in transit using tls/ssl in iis if a single swimlane server deployment is used, the database ports of 2424, 2480, and 27017 can be blocked to restrict external database access if mongodb is located on a separate server, or if multiple database servers are used, consider using tls/ssl for transport encryption of data in transit between the database servers and the swimlane servers more information mongodb's tls/ssl documentation