How to set up the firewall for AgentP to connect to Cloud

In this topic, you will learn how to configure your firewall to make sure that the Portnox™ AgentP can communicate with Portnox™ Cloud.

You need to open the following ports on your firewall:

FQDN Protocol Ports Direction Description
mobilecentraal.portnox.com TCP 443, 8081 Outbound Enrollment, settings sync, VPN token
radius.portnox.com TCP 443 Outbound Direct access
devices-ingress-clear-prod-eastus.servicebus.windows.net TCP 80, 443, 5671, 5672 Outbound Data sync
devices-ingress-clear-prod-westeu.servicebus.windows.net TCP 80, 443, 5671, 5672 Outbound Data sync
portnox-centraal-prod.servicebus.windows.net TCP 80, 444, 5671, 5672 Outbound SB for VPN strong factors
portnox-centraal-prod-eastus.servicebus.windows.net TCP 80, 445, 5671, 5672 Outbound SB for VPN strong factors
cloudcentraalstoreprodus.blob.core.windows.net TCP 443 Outbound Blob for data sync
cloudcentraalstoreprod.blob.core.windows.net TCP 443 Outbound Blob for data sync
pnxeusprdclrinstallers.blob.core.windows.net TCP 443 Outbound Blob for data sync
pnxweuprdclrinstallers.blob.core.windows.net TCP 443 Outbound Blob for data sync
Note: Since Microsoft services can change their public IP addresses, we recommend not to use static IP addresses, and instead use FQDNs only.