Proofpoint | ObserveIT On-Premises Insider Threat Management
Firewall System Prerequisites
If there is a firewall blocking network traffic, open the following ports. Same rules apply for the local Windows Firewall, based on the computer’s role in the deployment.
| Source | Destination | Protocol | Port | Direction | Notes |
|---|---|---|---|---|---|
| ObserveIT Agent machines | ObserveIT Application Servers | TCP | 443 | One-way | Encrypted Agent traffic |
| ObserveIT administrator workstation | ObserveIT Web Console | TCP | 443 | One-way | Encrypted Web Console access |
| ObserveIT Application Servers ObserveIT Web Console | SQL server | TCP | 1433 | One-way | Database access for ObserveIT components |
| ObserveIT Application Servers | ObserveIT Application Servers | TCP | 445 | One-way | ObserveIT Hot Storage access |
| ObserveIT Application Servers | ObserveIT Application Server load balancer | TCP | 443 | One-way | Screenshot Storage Optimizer task access |
| ObserveIT Application Servers ObserveIT Web Console | File server hosting ObserveIT Warm Storage | TCP | 445 | One-way | ObserveIT Warm Storage access |
| ObserveIT Web Console | ObserveIT Application Servers | TCP | 443 | One-way | ObserveIT application component health check |
| ObserveIT Application Servers | ObserveIT Web Categorization module | TCP | 8000 | One-way | ObserveIT Application Server access to the Web Categorization module |
| ObserveIT Web Categorization module | https://nsv10.netstar-inc.com/ https://dss.netstar-inc.com/ gcftelemetry.netstar-inc.com (for Telemetry) |
TCP | 443 | One-way | ObserveIT Web Categorization module update access service |
Related Topic: