Network firewall requirements

Prev Next

The following firewall changes are necessary to allow communication between the Cloud Collector or Comm Broker and Trellix.

Source

Destination

Action

Protocol

Port

Cloud Collector or Comm Broker

Cloud Collector Manager FQDNs:

  • ccmaster01.map.mandiant.com or

  • ccmaster02.map.mandiant.com

Allow

TCP

80, 4505, 4506

Cloud Collector or Comm Broker

All 1

Allow

TCP

443

1 The Helix VPC uses the Amazon AWS address space. If you would like to be more restrictive than allowing 443 traffic to all destinations, refer to AWS documentation found here: http://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html.