How to check if the AD Broker connects to the cloud

In this topic, you will learn how to check if the Portnox™ Active Directory Broker connects to the Portnox™ Cloud service.

The Portnox Active Directory Broker connects to the cloud on the following ports:

  • Outgoing: portnox-centraal-prod.servicebus.windows.net:443
  • Outgoing: mobilecentraal.portnox.com:8081

You need to allow these connections on the firewall and these names/ports must be reachable from the Active Directory Broker machine.

Note: There are no static IP addresses for these services, only DNS names.

To check if the cloud is reachable, use the following methods:

  • Use the following PowerShell commands:

    • Test-NetConnection -Port 443 -ComputerName portnox-centraal-prod.servicebus.windows.net -InformationLevel Detailed
    • Test-NetConnection -Port 8081 -ComputerName mobilecentraal.portnox.com -InformationLevel Detailed
  • Try to open the following URLs in your browser and see if you receive a server response:

    • https://portnox-centraal-prod.servicebus.windows.net:443
    • https://mobilecentraal.portnox.com:8081 (a 503 response code means that there is connectivity)

If the servers are not reachable, you need to check DNS, firewall, and proxy settings.

The following ports must be open on the firewall for the broker to be able to communicate with the cloud:

Protocol Ports URL Direction IP
TCP 8081 mobilecentraal.portnox.com Outbound 13.92.155.150, 104.40.220.180
TCP 9350, 9351, 9352, 9354, 80, 443, 5671, 5672 *.servicebus.windows.net Outbound ANY
TCP 5671, 5672, 80, 443 devices-ingress-clear-prod-eastus.servicebus.windows.net Outbound 52.168.147.11
TCP 5671, 5672, 80, 443 devices-ingress-clear-prod-westeu.servicebus.windows.net Outbound 23.100.14.185
TCP 443 cloudcentraalstoreprodus.blob.core.windows.net Outbound 52.226.8.148
TCP 443 cloudcentraalstoreprod.blob.core.windows.net Outbound 52.239.140.10