Additional Plesk modules can be installed from the shell with the Plesk autoinstaller:

$PRODUCT_ROOT_D/admin/sbin/autoinstaller

Configure firewall
To ensure proper security configure firewalls for incoming traffic on all PBA components.

Plesk Panel  Application server
Allow connections from all servers by HTTPS (port 443).
Allow connections to port 5224 only for hosts that require access to PBA through XML RPC (typically, POA Management Node and PBA Online Store).
Allow connections by SSH (port 22) or RDP (port 3389) from required local hosts.
Refuse ICMP connections.
Drop other connections.

Plesk Panel Online Store server
Allow connections from all servers by HTTPS (port 443).
Allow connections by SSH (port 22) or RDP (port 3389) from required local hosts.
Refuse ICMP connections.
Drop other connections.

Plesk Panel Database server:
Allow connections by SSH (port 22) or RDP (port 3389) from required local hosts.
Allow incoming connections by port 5432 from PBA Application server only.
Refuse ICMP connections.
Drop other connections.

Note: configure access by SSH or RDP to all PBA servers from local hosts depending on used platform – Linux or Windows.