Agent-Based On-Premises Deployment

On-Premises-Based Deployment Network Permissions

From	To	Port	Purpose
Portal Server	https://gitlab.com/jwt/auth https://registry.gitlab.com registry.npmjs.org *.cloudcyte.com https://download.cloudcyte.com https://clapi.cloudcyte.com https://registry.cloudcyte.com *.docker.com https://www.docker.com *.docker.io https://docker.io *.rancher.io https://rancher.io *.rancher.com https://www.rancher.com *.k3s.io https://k3s.io helm.sh npmjs.org timestamp.sectigo.com http://archive.ubuntu.com/ubuntu/ http://security.ubuntu.com/ubuntu/ https://cdn.registry.gitlab-static.net	TCP 443	Installation, Configuration and Management
Portal Server	*.sendgrid.com https://sendgrid.com *.twilio.com https://www.twilio.com	TCP 443	MFA, Notifications and Reporting
Portal Server	*.virustotal.com https://www.virustotal.com	TCP 443	Threat Intelligence
Portal Server	login.microsoftonline.com vault.azure.net	TCP 443	Digital Signing
Portal Server	Broker Server	TCP 9200,5601,5432,8443,443 ICMP	Data Ingestion and analysis.
Broker Server	Portal Server	TCP 443 ICMP	Broker to server communication.
Client & Server Devices	Portal Server	TCP 443	The Agent should communicate Portal server directly if Agent installed on User devices
Client & Server Devices	https://api.ipify.org https://*.cloudcyte.com https://download.cloudcyte.com https://clapi.cloudcyte.com https://registry.cloudcyte.com	TCP 443	To get Public IP of Agent installed machine and update the agent automatically.
Management Machine (The machine for accessing the portal erver)	Portal & Broker Server & Database Server	TCP 443, 8443, 9200, 5601, 32001, 8344, 5432, 9090, 5432 ICMP	For access and troubleshooting when needed.
Portal Server	Database Server	TCP 5432, 9090	For access to database server from portal server.