• Support
  • Forums
  • Blogs

Endpoint Threat Hunter Agent - Ports?


New Life Form
Hi there,

I've been asked to have a look at Endpoint Threat Hunter and note it uses an agent.  Does anyone know what port it uses?  Do I have to set up some firewall rules?

Many thanks and best regards

Share post:


  • Hello @sean.mcpoland,

       The OTX_Agent connects from a random high port (on your host) to the OTX server on port 443. An INGRESS rule of 443 should suffice. Additionally, port 53 (DNS) is leveraged for domain lookups.  By rights, these ports are most likely already allowed by your firewall. 


    - kratos
  • Hi @kratos,

    Could you let me know what IP ranges to expect inbound 443 from?

    Many thanks,

Sign In or Register to comment.