• Support
  • Forums
  • Blogs

Endpoint Threat Hunter Agent - Ports?

sean.mcpolandsean.mcpoland

New Life Form
Hi there,

I've been asked to have a look at Endpoint Threat Hunter and note it uses an agent.  Does anyone know what port it uses?  Do I have to set up some firewall rules?

Many thanks and best regards
Seán
fcollins

Share post:

Answers

  • Hello @sean.mcpoland,

       The OTX_Agent connects from a random high port (on your host) to the OTX server on port 443. An INGRESS rule of 443 should suffice. Additionally, port 53 (DNS) is leveraged for domain lookups.  By rights, these ports are most likely already allowed by your firewall. 

       Regards,

    - kratos
    fcollins
  • Hi @kratos,

    Could you let me know what IP ranges to expect inbound 443 from?

    Many thanks,

    Joey
Sign In or Register to comment.